[{"url":"https://api.github.com/repos/src-d/lookout/pulls/837","id":702533180,"node_id":"MDExOlB1bGxSZXF1ZXN0NzAyNTMzMTgw","html_url":"https://github.com/src-d/lookout/pull/837","diff_url":"https://github.com/src-d/lookout/pull/837.diff","patch_url":"https://github.com/src-d/lookout/pull/837.patch","issue_url":"https://api.github.com/repos/src-d/lookout/issues/837","number":837,"state":"open","locked":false,"title":"[Security] Bump tar from 4.4.8 to 4.4.15 in /frontend","user":{"login":"dependabot-preview[bot]","id":27856297,"node_id":"MDM6Qm90Mjc4NTYyOTc=","avatar_url":"https://avatars.githubusercontent.com/in/2141?v=4","gravatar_id":"","url":"https://api.github.com/users/dependabot-preview%5Bbot%5D","html_url":"https://github.com/apps/dependabot-preview","followers_url":"https://api.github.com/users/dependabot-preview%5Bbot%5D/followers","following_url":"https://api.github.com/users/dependabot-preview%5Bbot%5D/following{/other_user}","gists_url":"https://api.github.com/users/dependabot-preview%5Bbot%5D/gists{/gist_id}","starred_url":"https://api.github.com/users/dependabot-preview%5Bbot%5D/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/dependabot-preview%5Bbot%5D/subscriptions","organizations_url":"https://api.github.com/users/dependabot-preview%5Bbot%5D/orgs","repos_url":"https://api.github.com/users/dependabot-preview%5Bbot%5D/repos","events_url":"https://api.github.com/users/dependabot-preview%5Bbot%5D/events{/privacy}","received_events_url":"https://api.github.com/users/dependabot-preview%5Bbot%5D/received_events","type":"Bot","user_view_type":"public","site_admin":false},"body":"Bumps [tar](https://github.com/npm/node-tar) from 4.4.8 to 4.4.15. **This update includes security fixes.**\n<details>\n<summary>Vulnerabilities fixed</summary>\n<p><em>Sourced from <a href=\"https://github.com/advisories/GHSA-3jfq-g458-7qm9\">The GitHub Security Advisory Database</a>.</em></p>\n<blockquote>\n<p><strong>Arbitrary File Creation/Overwrite due to insufficient absolute path sanitization</strong></p>\n<h3>Impact</h3>\n<p>Arbitrary File Creation, Arbitrary File Overwrite, Arbitrary Code Execution</p>\n<p><code>node-tar</code> aims to prevent extraction of absolute file paths by turning absolute paths into relative paths when the <code>preservePaths</code> flag is not set to <code>true</code>. This is achieved by stripping the absolute path root from any absolute file paths contained in a tar file. For example <code>/home/user/.bashrc</code> would turn into <code>home/user/.bashrc</code>.</p>\n<p>This logic was insufficient when file paths contained repeated path roots such as <code>////home/user/.bashrc</code>. <code>node-tar</code> would only strip a single path root from such paths. When given an absolute file path with repeating path roots, the resulting path (e.g. <code>///home/user/.bashrc</code>) would still resolve to an absolute path, thus allowing arbitrary file creation and overwrite.</p>\n<h3>Patches</h3>\n<p>3.2.2 || 4.4.14 || 5.0.6 || 6.1.1</p>\n<p>NOTE: an adjacent issue <a href=\"https://github.com/npm/node-tar/security/advisories/GHSA-r628-mhmh-qjhw\">CVE-2021-32803</a> affects this release level. Please ensure you update to the latest patch levels that address CVE-2021-32803 as well if this adjacent issue affects your <code>node-tar</code> use case.</p>\n<h3>Workarounds</h3>\n<p>Users may work around this vulnerability without upgrading by creating a custom <code>onentry</code> method which sanitizes the <code>entry.path</code> or a <code>filter</code> method which removes entries with absolute paths.</p>\n<pre lang=\"js\"><code>const path = require('path')\n&lt;/tr&gt;&lt;/table&gt; \n</code></pre>\n</blockquote>\n<p>... (truncated)</p>\n<blockquote>\n<p>Affected versions: &gt;= 4.0.0 &lt; 4.4.14</p>\n</blockquote>\n<p><em>Sourced from <a href=\"https://github.com/advisories/GHSA-r628-mhmh-qjhw\">The GitHub Security Advisory Database</a>.</em></p>\n<blockquote>\n<p><strong>Arbitrary File Creation/Overwrite via insufficient symlink protection due to directory cache poisoning</strong></p>\n<h3>Impact</h3>\n<p>Arbitrary File Creation, Arbitrary File Overwrite, Arbitrary Code Execution</p>\n<p><code>node-tar</code> aims to guarantee that any file whose location would be modified by a symbolic link is not extracted. This is, in part, achieved by ensuring that extracted directories are not symlinks.  Additionally, in order to prevent unnecessary <code>stat</code> calls to determine whether a given path is a directory, paths are cached when directories are created.</p>\n<p>This logic was insufficient when extracting tar files that contained both a directory and a symlink with the same name as the directory. This order of operations resulted in the directory being created and added to the <code>node-tar</code> directory cache. When a directory is present in the directory cache, subsequent calls to mkdir for that directory are skipped. However, this is also where <code>node-tar</code> checks for symlinks occur.</p>\n<p>By first creating a directory, and then replacing that directory with a symlink, it was thus possible to bypass <code>node-tar</code> symlink checks on directories, essentially allowing an untrusted tar file to symlink into an arbitrary location and subsequently extracting arbitrary files into that location, thus allowing arbitrary file creation and overwrite.</p>\n<p>This issue was addressed in releases 3.2.3, 4.4.15, 5.0.7 and 6.1.2.</p>\n<h3>Patches</h3>\n<p>3.2.3 || 4.4.15 || 5.0.7 || 6.1.2</p>\n<h3>Workarounds</h3>\n<p>Users may work around this vulnerability without upgrading by creating a custom <code>filter</code> method which prevents the extraction of symbolic links.</p>\n<!-- raw HTML omitted -->\n</blockquote>\n<p>... (truncated)</p>\n<blockquote>\n<p>Affected versions: &gt;= 4.0.0 &lt; 4.4.15</p>\n</blockquote>\n</details>\n<details>\n<summary>Commits</summary>\n<ul>\n<li><a href=\"https://github.com/npm/node-tar/commit/843c897e6844f70a34bb115df6c8a9b60112aaf5\"><code>843c897</code></a> 4.4.15</li>\n<li><a href=\"https://github.com/npm/node-tar/commit/46fe35083e2676e31c4e0a81639dce6da7aaa356\"><code>46fe350</code></a> Remove paths from dirCache when no longer dirs</li>\n<li><a href=\"https://github.com/npm/node-tar/commit/df3aa4d10253a886be82519acb901b446ca3feeb\"><code>df3aa4d</code></a> 4.4.14</li>\n<li><a href=\"https://github.com/npm/node-tar/commit/6d2801396fbad917ab8332ec8e91ff3d15bc22c6\"><code>6d28013</code></a> add publishConfig tag</li>\n<li><a href=\"https://github.com/npm/node-tar/commit/efc6bb0dbd54df8c7285d7aac12bba959b8387a6\"><code>efc6bb0</code></a> fix: strip absolute paths more comprehensively</li>\n<li><a href=\"https://github.com/npm/node-tar/commit/65edb39114ad5956c06f8d7893365e942042ede1\"><code>65edb39</code></a> 4.4.13</li>\n<li><a href=\"https://github.com/npm/node-tar/commit/d04c3ffb41a0d2bbae926a38d3456ebda0249565\"><code>d04c3ff</code></a> Always provide a callback to fs.close()</li>\n<li><a href=\"https://github.com/npm/node-tar/commit/dbd6f52ba9cdfbce2a28d8cd28a016bc3435946a\"><code>dbd6f52</code></a> 4.4.12</li>\n<li><a href=\"https://github.com/npm/node-tar/commit/0240086746b72c3080598ea2a2ba6ad85de9ec08\"><code>0240086</code></a> update tap and minipass</li>\n<li><a href=\"https://github.com/npm/node-tar/commit/9232b3d7da934c142e3d0ab97ef35ec0ba3917fc\"><code>9232b3d</code></a> 4.4.11</li>\n<li>Additional commits viewable in <a href=\"https://github.com/npm/node-tar/compare/v4.4.8...v4.4.15\">compare view</a></li>\n</ul>\n</details>\n<br />\n\n\n[![Dependabot compatibility score](https://api.dependabot.com/badges/compatibility_score?dependency-name=tar&package-manager=npm_and_yarn&previous-version=4.4.8&new-version=4.4.15)](https://dependabot.com/compatibility-score/?dependency-name=tar&package-manager=npm_and_yarn&previous-version=4.4.8&new-version=4.4.15)\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n<details>\n<summary>Dependabot commands and options</summary>\n<br />\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot merge` will merge this PR after your CI passes on it\n- `@dependabot squash and merge` will squash and merge this PR after your CI passes on it\n- `@dependabot cancel merge` will cancel a previously requested merge and block automerging\n- `@dependabot reopen` will reopen this PR if it is closed\n- `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually\n- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot use these labels` will set the current labels as the default for future PRs for this repo and language\n- `@dependabot use these reviewers` will set the current reviewers as the default for future PRs for this repo and language\n- `@dependabot use these assignees` will set the current assignees as the default for future PRs for this repo and language\n- `@dependabot use this milestone` will set the current milestone as the default for future PRs for this repo and language\n- `@dependabot badge me` will comment on this PR with code to add a \"Dependabot enabled\" badge to your readme\n\nAdditionally, you can set the following in your Dependabot [dashboard](https://app.dependabot.com):\n- Update frequency (including time of day and day of week)\n- Pull request limits (per update run and/or open at any time)\n- Automerge options (never/patch/minor, and dev/runtime dependencies)\n- Out-of-range updates (receive only lockfile updates, if desired)\n- Security updates (receive only security updates, if desired)\n\n\n\n</details>","created_at":"2021-08-03T19:18:35Z","updated_at":"2021-08-03T19:18:37Z","closed_at":null,"merged_at":null,"merge_commit_sha":"937e1264aab44080b950953180257c1333b3ca37","assignees":[],"requested_reviewers":[],"requested_teams":[],"labels":[{"id":1224325914,"node_id":"MDU6TGFiZWwxMjI0MzI1OTE0","url":"https://api.github.com/repos/src-d/lookout/labels/dependencies","name":"dependencies","color":"0025ff","default":false,"description":"Pull requests that update a dependency file"},{"id":1225416698,"node_id":"MDU6TGFiZWwxMjI1NDE2Njk4","url":"https://api.github.com/repos/src-d/lookout/labels/javascript","name":"javascript","color":"168700","default":false,"description":"Pull requests that update Javascript code"},{"id":1445656551,"node_id":"MDU6TGFiZWwxNDQ1NjU2NTUx","url":"https://api.github.com/repos/src-d/lookout/labels/security","name":"security","color":"ee0701","default":false,"description":"Pull requests that address a security vulnerability"}],"milestone":null,"draft":false,"commits_url":"https://api.github.com/repos/src-d/lookout/pulls/837/commits","review_comments_url":"https://api.github.com/repos/src-d/lookout/pulls/837/comments","review_comment_url":"https://api.github.com/repos/src-d/lookout/pulls/comments{/number}","comments_url":"https://api.github.com/repos/src-d/lookout/issues/837/comments","statuses_url":"https://api.github.com/repos/src-d/lookout/statuses/20ed56232e51e0eea98ffdbed11a3f7d2aff2db7","head":{"label":"src-d:dependabot/npm_and_yarn/frontend/tar-4.4.15","ref":"dependabot/npm_and_yarn/frontend/tar-4.4.15","sha":"20ed56232e51e0eea98ffdbed11a3f7d2aff2db7","user":{"login":"src-d","id":15128793,"node_id":"MDEyOk9yZ2FuaXphdGlvbjE1MTI4Nzkz","avatar_url":"https://avatars.githubusercontent.com/u/15128793?v=4","gravatar_id":"","url":"https://api.github.com/users/src-d","html_url":"https://github.com/src-d","followers_url":"https://api.github.com/users/src-d/followers","following_url":"https://api.github.com/users/src-d/following{/other_user}","gists_url":"https://api.github.com/users/src-d/gists{/gist_id}","starred_url":"https://api.github.com/users/src-d/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/src-d/subscriptions","organizations_url":"https://api.github.com/users/src-d/orgs","repos_url":"https://api.github.com/users/src-d/repos","events_url":"https://api.github.com/users/src-d/events{/privacy}","received_events_url":"https://api.github.com/users/src-d/received_events","type":"Organization","user_view_type":"public","site_admin":false},"repo":{"id":136146572,"node_id":"MDEwOlJlcG9zaXRvcnkxMzYxNDY1NzI=","name":"lookout","full_name":"src-d/lookout","private":false,"owner":{"login":"src-d","id":15128793,"node_id":"MDEyOk9yZ2FuaXphdGlvbjE1MTI4Nzkz","avatar_url":"https://avatars.githubusercontent.com/u/15128793?v=4","gravatar_id":"","url":"https://api.github.com/users/src-d","html_url":"https://github.com/src-d","followers_url":"https://api.github.com/users/src-d/followers","following_url":"https://api.github.com/users/src-d/following{/other_user}","gists_url":"https://api.github.com/users/src-d/gists{/gist_id}","starred_url":"https://api.github.com/users/src-d/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/src-d/subscriptions","organizations_url":"https://api.github.com/users/src-d/orgs","repos_url":"https://api.github.com/users/src-d/repos","events_url":"https://api.github.com/users/src-d/events{/privacy}","received_events_url":"https://api.github.com/users/src-d/received_events","type":"Organization","user_view_type":"public","site_admin":false},"html_url":"https://github.com/src-d/lookout","description":"Assisted code review, running custom code analyzers on pull requests","fork":false,"url":"https://api.github.com/repos/src-d/lookout","forks_url":"https://api.github.com/repos/src-d/lookout/forks","keys_url":"https://api.github.com/repos/src-d/lookout/keys{/key_id}","collaborators_url":"https://api.github.com/repos/src-d/lookout/collaborators{/collaborator}","teams_url":"https://api.github.com/repos/src-d/lookout/teams","hooks_url":"https://api.github.com/repos/src-d/lookout/hooks","issue_events_url":"https://api.github.com/repos/src-d/lookout/issues/events{/number}","events_url":"https://api.github.com/repos/src-d/lookout/events","assignees_url":"https://api.github.com/repos/src-d/lookout/assignees{/user}","branches_url":"https://api.github.com/repos/src-d/lookout/branches{/branch}","tags_url":"https://api.github.com/repos/src-d/lookout/tags","blobs_url":"https://api.github.com/repos/src-d/lookout/git/blobs{/sha}","git_tags_url":"https://api.github.com/repos/src-d/lookout/git/tags{/sha}","git_refs_url":"https://api.github.com/repos/src-d/lookout/git/refs{/sha}","trees_url":"https://api.github.com/repos/src-d/lookout/git/trees{/sha}","statuses_url":"https://api.github.com/repos/src-d/lookout/statuses/{sha}","languages_url":"https://api.github.com/repos/src-d/lookout/languages","stargazers_url":"https://api.github.com/repos/src-d/lookout/stargazers","contributors_url":"https://api.github.com/repos/src-d/lookout/contributors","subscribers_url":"https://api.github.com/repos/src-d/lookout/subscribers","subscription_url":"https://api.github.com/repos/src-d/lookout/subscription","commits_url":"https://api.github.com/repos/src-d/lookout/commits{/sha}","git_commits_url":"https://api.github.com/repos/src-d/lookout/git/commits{/sha}","comments_url":"https://api.github.com/repos/src-d/lookout/comments{/number}","issue_comment_url":"https://api.github.com/repos/src-d/lookout/issues/comments{/number}","contents_url":"https://api.github.com/repos/src-d/lookout/contents/{+path}","compare_url":"https://api.github.com/repos/src-d/lookout/compare/{base}...{head}","merges_url":"https://api.github.com/repos/src-d/lookout/merges","archive_url":"https://api.github.com/repos/src-d/lookout/{archive_format}{/ref}","downloads_url":"https://api.github.com/repos/src-d/lookout/downloads","issues_url":"https://api.github.com/repos/src-d/lookout/issues{/number}","pulls_url":"https://api.github.com/repos/src-d/lookout/pulls{/number}","milestones_url":"https://api.github.com/repos/src-d/lookout/milestones{/number}","notifications_url":"https://api.github.com/repos/src-d/lookout/notifications{?since,all,participating}","labels_url":"https://api.github.com/repos/src-d/lookout/labels{/name}","releases_url":"https://api.github.com/repos/src-d/lookout/releases{/id}","deployments_url":"https://api.github.com/repos/src-d/lookout/deployments","created_at":"2018-06-05T08:37:23Z","updated_at":"2025-10-05T17:39:33Z","pushed_at":"2021-08-03T19:18:36Z","git_url":"git://github.com/src-d/lookout.git","ssh_url":"git@github.com:src-d/lookout.git","clone_url":"https://github.com/src-d/lookout.git","svn_url":"https://github.com/src-d/lookout","homepage":"https://docs.sourced.tech/lookout","size":60130,"stargazers_count":152,"watchers_count":152,"language":"Go","has_issues":true,"has_projects":false,"has_downloads":true,"has_wiki":false,"has_pages":false,"has_discussions":false,"forks_count":33,"mirror_url":null,"archived":false,"disabled":false,"open_issues_count":84,"license":{"key":"agpl-3.0","name":"GNU Affero General Public License v3.0","spdx_id":"AGPL-3.0","url":"https://api.github.com/licenses/agpl-3.0","node_id":"MDc6TGljZW5zZTE="},"allow_forking":true,"is_template":false,"web_commit_signoff_required":false,"has_pull_requests":true,"pull_request_creation_policy":"all","topics":["code-review","github","lookout"],"visibility":"public","forks":33,"open_issues":84,"watchers":152,"default_branch":"master"}},"base":{"label":"src-d:master","ref":"master","sha":"d5cccd9aed531327965c374533f42e0469af4cda","user":{"login":"src-d","id":15128793,"node_id":"MDEyOk9yZ2FuaXphdGlvbjE1MTI4Nzkz","avatar_url":"https://avatars.githubusercontent.com/u/15128793?v=4","gravatar_id":"","url":"https://api.github.com/users/src-d","html_url":"https://github.com/src-d","followers_url":"https://api.github.com/users/src-d/followers","following_url":"https://api.github.com/users/src-d/following{/other_user}","gists_url":"https://api.github.com/users/src-d/gists{/gist_id}","starred_url":"https://api.github.com/users/src-d/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/src-d/subscriptions","organizations_url":"https://api.github.com/users/src-d/orgs","repos_url":"https://api.github.com/users/src-d/repos","events_url":"https://api.github.com/users/src-d/events{/privacy}","received_events_url":"https://api.github.com/users/src-d/received_events","type":"Organization","user_view_type":"public","site_admin":false},"repo":{"id":136146572,"node_id":"MDEwOlJlcG9zaXRvcnkxMzYxNDY1NzI=","name":"lookout","full_name":"src-d/lookout","private":false,"owner":{"login":"src-d","id":15128793,"node_id":"MDEyOk9yZ2FuaXphdGlvbjE1MTI4Nzkz","avatar_url":"https://avatars.githubusercontent.com/u/15128793?v=4","gravatar_id":"","url":"https://api.github.com/users/src-d","html_url":"https://github.com/src-d","followers_url":"https://api.github.com/users/src-d/followers","following_url":"https://api.github.com/users/src-d/following{/other_user}","gists_url":"https://api.github.com/users/src-d/gists{/gist_id}","starred_url":"https://api.github.com/users/src-d/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/src-d/subscriptions","organizations_url":"https://api.github.com/users/src-d/orgs","repos_url":"https://api.github.com/users/src-d/repos","events_url":"https://api.github.com/users/src-d/events{/privacy}","received_events_url":"https://api.github.com/users/src-d/received_events","type":"Organization","user_view_type":"public","site_admin":false},"html_url":"https://github.com/src-d/lookout","description":"Assisted code review, running custom code analyzers on pull requests","fork":false,"url":"https://api.github.com/repos/src-d/lookout","forks_url":"https://api.github.com/repos/src-d/lookout/forks","keys_url":"https://api.github.com/repos/src-d/lookout/keys{/key_id}","collaborators_url":"https://api.github.com/repos/src-d/lookout/collaborators{/collaborator}","teams_url":"https://api.github.com/repos/src-d/lookout/teams","hooks_url":"https://api.github.com/repos/src-d/lookout/hooks","issue_events_url":"https://api.github.com/repos/src-d/lookout/issues/events{/number}","events_url":"https://api.github.com/repos/src-d/lookout/events","assignees_url":"https://api.github.com/repos/src-d/lookout/assignees{/user}","branches_url":"https://api.github.com/repos/src-d/lookout/branches{/branch}","tags_url":"https://api.github.com/repos/src-d/lookout/tags","blobs_url":"https://api.github.com/repos/src-d/lookout/git/blobs{/sha}","git_tags_url":"https://api.github.com/repos/src-d/lookout/git/tags{/sha}","git_refs_url":"https://api.github.com/repos/src-d/lookout/git/refs{/sha}","trees_url":"https://api.github.com/repos/src-d/lookout/git/trees{/sha}","statuses_url":"https://api.github.com/repos/src-d/lookout/statuses/{sha}","languages_url":"https://api.github.com/repos/src-d/lookout/languages","stargazers_url":"https://api.github.com/repos/src-d/lookout/stargazers","contributors_url":"https://api.github.com/repos/src-d/lookout/contributors","subscribers_url":"https://api.github.com/repos/src-d/lookout/subscribers","subscription_url":"https://api.github.com/repos/src-d/lookout/subscription","commits_url":"https://api.github.com/repos/src-d/lookout/commits{/sha}","git_commits_url":"https://api.github.com/repos/src-d/lookout/git/commits{/sha}","comments_url":"https://api.github.com/repos/src-d/lookout/comments{/number}","issue_comment_url":"https://api.github.com/repos/src-d/lookout/issues/comments{/number}","contents_url":"https://api.github.com/repos/src-d/lookout/contents/{+path}","compare_url":"https://api.github.com/repos/src-d/lookout/compare/{base}...{head}","merges_url":"https://api.github.com/repos/src-d/lookout/merges","archive_url":"https://api.github.com/repos/src-d/lookout/{archive_format}{/ref}","downloads_url":"https://api.github.com/repos/src-d/lookout/downloads","issues_url":"https://api.github.com/repos/src-d/lookout/issues{/number}","pulls_url":"https://api.github.com/repos/src-d/lookout/pulls{/number}","milestones_url":"https://api.github.com/repos/src-d/lookout/milestones{/number}","notifications_url":"https://api.github.com/repos/src-d/lookout/notifications{?since,all,participating}","labels_url":"https://api.github.com/repos/src-d/lookout/labels{/name}","releases_url":"https://api.github.com/repos/src-d/lookout/releases{/id}","deployments_url":"https://api.github.com/repos/src-d/lookout/deployments","created_at":"2018-06-05T08:37:23Z","updated_at":"2025-10-05T17:39:33Z","pushed_at":"2021-08-03T19:18:36Z","git_url":"git://github.com/src-d/lookout.git","ssh_url":"git@github.com:src-d/lookout.git","clone_url":"https://github.com/src-d/lookout.git","svn_url":"https://github.com/src-d/lookout","homepage":"https://docs.sourced.tech/lookout","size":60130,"stargazers_count":152,"watchers_count":152,"language":"Go","has_issues":true,"has_projects":false,"has_downloads":true,"has_wiki":false,"has_pages":false,"has_discussions":false,"forks_count":33,"mirror_url":null,"archived":false,"disabled":false,"open_issues_count":84,"license":{"key":"agpl-3.0","name":"GNU Affero General Public License v3.0","spdx_id":"AGPL-3.0","url":"https://api.github.com/licenses/agpl-3.0","node_id":"MDc6TGljZW5zZTE="},"allow_forking":true,"is_template":false,"web_commit_signoff_required":false,"has_pull_requests":true,"pull_request_creation_policy":"all","topics":["code-review","github","lookout"],"visibility":"public","forks":33,"open_issues":84,"watchers":152,"default_branch":"master"}},"_links":{"self":{"href":"https://api.github.com/repos/src-d/lookout/pulls/837"},"html":{"href":"https://github.com/src-d/lookout/pull/837"},"issue":{"href":"https://api.github.com/repos/src-d/lookout/issues/837"},"comments":{"href":"https://api.github.com/repos/src-d/lookout/issues/837/comments"},"review_comments":{"href":"https://api.github.com/repos/src-d/lookout/pulls/837/comments"},"review_comment":{"href":"https://api.github.com/repos/src-d/lookout/pulls/comments{/number}"},"commits":{"href":"https://api.github.com/repos/src-d/lookout/pulls/837/commits"},"statuses":{"href":"https://api.github.com/repos/src-d/lookout/statuses/20ed56232e51e0eea98ffdbed11a3f7d2aff2db7"}},"author_association":"NONE","auto_merge":null,"assignee":null,"active_lock_reason":null},{"url":"https://api.github.com/repos/src-d/lookout/pulls/836","id":700821991,"node_id":"MDExOlB1bGxSZXF1ZXN0NzAwODIxOTkx","html_url":"https://github.com/src-d/lookout/pull/836","diff_url":"https://github.com/src-d/lookout/pull/836.diff","patch_url":"https://github.com/src-d/lookout/pull/836.patch","issue_url":"https://api.github.com/repos/src-d/lookout/issues/836","number":836,"state":"open","locked":false,"title":"Bump @types/node from 11.11.0 to 16.4.9 in /frontend","user":{"login":"dependabot-preview[bot]","id":27856297,"node_id":"MDM6Qm90Mjc4NTYyOTc=","avatar_url":"https://avatars.githubusercontent.com/in/2141?v=4","gravatar_id":"","url":"https://api.github.com/users/dependabot-preview%5Bbot%5D","html_url":"https://github.com/apps/dependabot-preview","followers_url":"https://api.github.com/users/dependabot-preview%5Bbot%5D/followers","following_url":"https://api.github.com/users/dependabot-preview%5Bbot%5D/following{/other_user}","gists_url":"https://api.github.com/users/dependabot-preview%5Bbot%5D/gists{/gist_id}","starred_url":"https://api.github.com/users/dependabot-preview%5Bbot%5D/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/dependabot-preview%5Bbot%5D/subscriptions","organizations_url":"https://api.github.com/users/dependabot-preview%5Bbot%5D/orgs","repos_url":"https://api.github.com/users/dependabot-preview%5Bbot%5D/repos","events_url":"https://api.github.com/users/dependabot-preview%5Bbot%5D/events{/privacy}","received_events_url":"https://api.github.com/users/dependabot-preview%5Bbot%5D/received_events","type":"Bot","user_view_type":"public","site_admin":false},"body":"Bumps [@types/node](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/node) from 11.11.0 to 16.4.9.\n<details>\n<summary>Commits</summary>\n<ul>\n<li>See full diff in <a href=\"https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/node\">compare view</a></li>\n</ul>\n</details>\n<br />\n\n\n[![Dependabot compatibility score](https://api.dependabot.com/badges/compatibility_score?dependency-name=@types/node&package-manager=npm_and_yarn&previous-version=11.11.0&new-version=16.4.9)](https://dependabot.com/compatibility-score/?dependency-name=@types/node&package-manager=npm_and_yarn&previous-version=11.11.0&new-version=16.4.9)\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n<details>\n<summary>Dependabot commands and options</summary>\n<br />\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot merge` will merge this PR after your CI passes on it\n- `@dependabot squash and merge` will squash and merge this PR after your CI passes on it\n- `@dependabot cancel merge` will cancel a previously requested merge and block automerging\n- `@dependabot reopen` will reopen this PR if it is closed\n- `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually\n- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot use these labels` will set the current labels as the default for future PRs for this repo and language\n- `@dependabot use these reviewers` will set the current reviewers as the default for future PRs for this repo and language\n- `@dependabot use these assignees` will set the current assignees as the default for future PRs for this repo and language\n- `@dependabot use this milestone` will set the current milestone as the default for future PRs for this repo and language\n- `@dependabot badge me` will comment on this PR with code to add a \"Dependabot enabled\" badge to your readme\n\nAdditionally, you can set the following in your Dependabot [dashboard](https://app.dependabot.com):\n- Update frequency (including time of day and day of week)\n- Pull request limits (per update run and/or open at any time)\n- Automerge options (never/patch/minor, and dev/runtime dependencies)\n- Out-of-range updates (receive only lockfile updates, if desired)\n- Security updates (receive only security updates, if desired)\n\n\n\n</details>","created_at":"2021-08-01T04:19:35Z","updated_at":"2021-08-01T04:19:36Z","closed_at":null,"merged_at":null,"merge_commit_sha":"57c0efd00e026ac58606d6461334c84debae7870","assignees":[],"requested_reviewers":[],"requested_teams":[],"labels":[{"id":1224325914,"node_id":"MDU6TGFiZWwxMjI0MzI1OTE0","url":"https://api.github.com/repos/src-d/lookout/labels/dependencies","name":"dependencies","color":"0025ff","default":false,"description":"Pull requests that update a dependency file"},{"id":1225416698,"node_id":"MDU6TGFiZWwxMjI1NDE2Njk4","url":"https://api.github.com/repos/src-d/lookout/labels/javascript","name":"javascript","color":"168700","default":false,"description":"Pull requests that update Javascript code"}],"milestone":null,"draft":false,"commits_url":"https://api.github.com/repos/src-d/lookout/pulls/836/commits","review_comments_url":"https://api.github.com/repos/src-d/lookout/pulls/836/comments","review_comment_url":"https://api.github.com/repos/src-d/lookout/pulls/comments{/number}","comments_url":"https://api.github.com/repos/src-d/lookout/issues/836/comments","statuses_url":"https://api.github.com/repos/src-d/lookout/statuses/e8f154397f8f73477984734a79ba1aa812a3ebf4","head":{"label":"src-d:dependabot/npm_and_yarn/frontend/types/node-16.4.9","ref":"dependabot/npm_and_yarn/frontend/types/node-16.4.9","sha":"e8f154397f8f73477984734a79ba1aa812a3ebf4","user":{"login":"src-d","id":15128793,"node_id":"MDEyOk9yZ2FuaXphdGlvbjE1MTI4Nzkz","avatar_url":"https://avatars.githubusercontent.com/u/15128793?v=4","gravatar_id":"","url":"https://api.github.com/users/src-d","html_url":"https://github.com/src-d","followers_url":"https://api.github.com/users/src-d/followers","following_url":"https://api.github.com/users/src-d/following{/other_user}","gists_url":"https://api.github.com/users/src-d/gists{/gist_id}","starred_url":"https://api.github.com/users/src-d/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/src-d/subscriptions","organizations_url":"https://api.github.com/users/src-d/orgs","repos_url":"https://api.github.com/users/src-d/repos","events_url":"https://api.github.com/users/src-d/events{/privacy}","received_events_url":"https://api.github.com/users/src-d/received_events","type":"Organization","user_view_type":"public","site_admin":false},"repo":{"id":136146572,"node_id":"MDEwOlJlcG9zaXRvcnkxMzYxNDY1NzI=","name":"lookout","full_name":"src-d/lookout","private":false,"owner":{"login":"src-d","id":15128793,"node_id":"MDEyOk9yZ2FuaXphdGlvbjE1MTI4Nzkz","avatar_url":"https://avatars.githubusercontent.com/u/15128793?v=4","gravatar_id":"","url":"https://api.github.com/users/src-d","html_url":"https://github.com/src-d","followers_url":"https://api.github.com/users/src-d/followers","following_url":"https://api.github.com/users/src-d/following{/other_user}","gists_url":"https://api.github.com/users/src-d/gists{/gist_id}","starred_url":"https://api.github.com/users/src-d/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/src-d/subscriptions","organizations_url":"https://api.github.com/users/src-d/orgs","repos_url":"https://api.github.com/users/src-d/repos","events_url":"https://api.github.com/users/src-d/events{/privacy}","received_events_url":"https://api.github.com/users/src-d/received_events","type":"Organization","user_view_type":"public","site_admin":false},"html_url":"https://github.com/src-d/lookout","description":"Assisted code review, running custom code analyzers on pull requests","fork":false,"url":"https://api.github.com/repos/src-d/lookout","forks_url":"https://api.github.com/repos/src-d/lookout/forks","keys_url":"https://api.github.com/repos/src-d/lookout/keys{/key_id}","collaborators_url":"https://api.github.com/repos/src-d/lookout/collaborators{/collaborator}","teams_url":"https://api.github.com/repos/src-d/lookout/teams","hooks_url":"https://api.github.com/repos/src-d/lookout/hooks","issue_events_url":"https://api.github.com/repos/src-d/lookout/issues/events{/number}","events_url":"https://api.github.com/repos/src-d/lookout/events","assignees_url":"https://api.github.com/repos/src-d/lookout/assignees{/user}","branches_url":"https://api.github.com/repos/src-d/lookout/branches{/branch}","tags_url":"https://api.github.com/repos/src-d/lookout/tags","blobs_url":"https://api.github.com/repos/src-d/lookout/git/blobs{/sha}","git_tags_url":"https://api.github.com/repos/src-d/lookout/git/tags{/sha}","git_refs_url":"https://api.github.com/repos/src-d/lookout/git/refs{/sha}","trees_url":"https://api.github.com/repos/src-d/lookout/git/trees{/sha}","statuses_url":"https://api.github.com/repos/src-d/lookout/statuses/{sha}","languages_url":"https://api.github.com/repos/src-d/lookout/languages","stargazers_url":"https://api.github.com/repos/src-d/lookout/stargazers","contributors_url":"https://api.github.com/repos/src-d/lookout/contributors","subscribers_url":"https://api.github.com/repos/src-d/lookout/subscribers","subscription_url":"https://api.github.com/repos/src-d/lookout/subscription","commits_url":"https://api.github.com/repos/src-d/lookout/commits{/sha}","git_commits_url":"https://api.github.com/repos/src-d/lookout/git/commits{/sha}","comments_url":"https://api.github.com/repos/src-d/lookout/comments{/number}","issue_comment_url":"https://api.github.com/repos/src-d/lookout/issues/comments{/number}","contents_url":"https://api.github.com/repos/src-d/lookout/contents/{+path}","compare_url":"https://api.github.com/repos/src-d/lookout/compare/{base}...{head}","merges_url":"https://api.github.com/repos/src-d/lookout/merges","archive_url":"https://api.github.com/repos/src-d/lookout/{archive_format}{/ref}","downloads_url":"https://api.github.com/repos/src-d/lookout/downloads","issues_url":"https://api.github.com/repos/src-d/lookout/issues{/number}","pulls_url":"https://api.github.com/repos/src-d/lookout/pulls{/number}","milestones_url":"https://api.github.com/repos/src-d/lookout/milestones{/number}","notifications_url":"https://api.github.com/repos/src-d/lookout/notifications{?since,all,participating}","labels_url":"https://api.github.com/repos/src-d/lookout/labels{/name}","releases_url":"https://api.github.com/repos/src-d/lookout/releases{/id}","deployments_url":"https://api.github.com/repos/src-d/lookout/deployments","created_at":"2018-06-05T08:37:23Z","updated_at":"2025-10-05T17:39:33Z","pushed_at":"2021-08-03T19:18:36Z","git_url":"git://github.com/src-d/lookout.git","ssh_url":"git@github.com:src-d/lookout.git","clone_url":"https://github.com/src-d/lookout.git","svn_url":"https://github.com/src-d/lookout","homepage":"https://docs.sourced.tech/lookout","size":60130,"stargazers_count":152,"watchers_count":152,"language":"Go","has_issues":true,"has_projects":false,"has_downloads":true,"has_wiki":false,"has_pages":false,"has_discussions":false,"forks_count":33,"mirror_url":null,"archived":false,"disabled":false,"open_issues_count":84,"license":{"key":"agpl-3.0","name":"GNU Affero General Public License v3.0","spdx_id":"AGPL-3.0","url":"https://api.github.com/licenses/agpl-3.0","node_id":"MDc6TGljZW5zZTE="},"allow_forking":true,"is_template":false,"web_commit_signoff_required":false,"has_pull_requests":true,"pull_request_creation_policy":"all","topics":["code-review","github","lookout"],"visibility":"public","forks":33,"open_issues":84,"watchers":152,"default_branch":"master"}},"base":{"label":"src-d:master","ref":"master","sha":"d5cccd9aed531327965c374533f42e0469af4cda","user":{"login":"src-d","id":15128793,"node_id":"MDEyOk9yZ2FuaXphdGlvbjE1MTI4Nzkz","avatar_url":"https://avatars.githubusercontent.com/u/15128793?v=4","gravatar_id":"","url":"https://api.github.com/users/src-d","html_url":"https://github.com/src-d","followers_url":"https://api.github.com/users/src-d/followers","following_url":"https://api.github.com/users/src-d/following{/other_user}","gists_url":"https://api.github.com/users/src-d/gists{/gist_id}","starred_url":"https://api.github.com/users/src-d/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/src-d/subscriptions","organizations_url":"https://api.github.com/users/src-d/orgs","repos_url":"https://api.github.com/users/src-d/repos","events_url":"https://api.github.com/users/src-d/events{/privacy}","received_events_url":"https://api.github.com/users/src-d/received_events","type":"Organization","user_view_type":"public","site_admin":false},"repo":{"id":136146572,"node_id":"MDEwOlJlcG9zaXRvcnkxMzYxNDY1NzI=","name":"lookout","full_name":"src-d/lookout","private":false,"owner":{"login":"src-d","id":15128793,"node_id":"MDEyOk9yZ2FuaXphdGlvbjE1MTI4Nzkz","avatar_url":"https://avatars.githubusercontent.com/u/15128793?v=4","gravatar_id":"","url":"https://api.github.com/users/src-d","html_url":"https://github.com/src-d","followers_url":"https://api.github.com/users/src-d/followers","following_url":"https://api.github.com/users/src-d/following{/other_user}","gists_url":"https://api.github.com/users/src-d/gists{/gist_id}","starred_url":"https://api.github.com/users/src-d/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/src-d/subscriptions","organizations_url":"https://api.github.com/users/src-d/orgs","repos_url":"https://api.github.com/users/src-d/repos","events_url":"https://api.github.com/users/src-d/events{/privacy}","received_events_url":"https://api.github.com/users/src-d/received_events","type":"Organization","user_view_type":"public","site_admin":false},"html_url":"https://github.com/src-d/lookout","description":"Assisted code review, running custom code analyzers on pull requests","fork":false,"url":"https://api.github.com/repos/src-d/lookout","forks_url":"https://api.github.com/repos/src-d/lookout/forks","keys_url":"https://api.github.com/repos/src-d/lookout/keys{/key_id}","collaborators_url":"https://api.github.com/repos/src-d/lookout/collaborators{/collaborator}","teams_url":"https://api.github.com/repos/src-d/lookout/teams","hooks_url":"https://api.github.com/repos/src-d/lookout/hooks","issue_events_url":"https://api.github.com/repos/src-d/lookout/issues/events{/number}","events_url":"https://api.github.com/repos/src-d/lookout/events","assignees_url":"https://api.github.com/repos/src-d/lookout/assignees{/user}","branches_url":"https://api.github.com/repos/src-d/lookout/branches{/branch}","tags_url":"https://api.github.com/repos/src-d/lookout/tags","blobs_url":"https://api.github.com/repos/src-d/lookout/git/blobs{/sha}","git_tags_url":"https://api.github.com/repos/src-d/lookout/git/tags{/sha}","git_refs_url":"https://api.github.com/repos/src-d/lookout/git/refs{/sha}","trees_url":"https://api.github.com/repos/src-d/lookout/git/trees{/sha}","statuses_url":"https://api.github.com/repos/src-d/lookout/statuses/{sha}","languages_url":"https://api.github.com/repos/src-d/lookout/languages","stargazers_url":"https://api.github.com/repos/src-d/lookout/stargazers","contributors_url":"https://api.github.com/repos/src-d/lookout/contributors","subscribers_url":"https://api.github.com/repos/src-d/lookout/subscribers","subscription_url":"https://api.github.com/repos/src-d/lookout/subscription","commits_url":"https://api.github.com/repos/src-d/lookout/commits{/sha}","git_commits_url":"https://api.github.com/repos/src-d/lookout/git/commits{/sha}","comments_url":"https://api.github.com/repos/src-d/lookout/comments{/number}","issue_comment_url":"https://api.github.com/repos/src-d/lookout/issues/comments{/number}","contents_url":"https://api.github.com/repos/src-d/lookout/contents/{+path}","compare_url":"https://api.github.com/repos/src-d/lookout/compare/{base}...{head}","merges_url":"https://api.github.com/repos/src-d/lookout/merges","archive_url":"https://api.github.com/repos/src-d/lookout/{archive_format}{/ref}","downloads_url":"https://api.github.com/repos/src-d/lookout/downloads","issues_url":"https://api.github.com/repos/src-d/lookout/issues{/number}","pulls_url":"https://api.github.com/repos/src-d/lookout/pulls{/number}","milestones_url":"https://api.github.com/repos/src-d/lookout/milestones{/number}","notifications_url":"https://api.github.com/repos/src-d/lookout/notifications{?since,all,participating}","labels_url":"https://api.github.com/repos/src-d/lookout/labels{/name}","releases_url":"https://api.github.com/repos/src-d/lookout/releases{/id}","deployments_url":"https://api.github.com/repos/src-d/lookout/deployments","created_at":"2018-06-05T08:37:23Z","updated_at":"2025-10-05T17:39:33Z","pushed_at":"2021-08-03T19:18:36Z","git_url":"git://github.com/src-d/lookout.git","ssh_url":"git@github.com:src-d/lookout.git","clone_url":"https://github.com/src-d/lookout.git","svn_url":"https://github.com/src-d/lookout","homepage":"https://docs.sourced.tech/lookout","size":60130,"stargazers_count":152,"watchers_count":152,"language":"Go","has_issues":true,"has_projects":false,"has_downloads":true,"has_wiki":false,"has_pages":false,"has_discussions":false,"forks_count":33,"mirror_url":null,"archived":false,"disabled":false,"open_issues_count":84,"license":{"key":"agpl-3.0","name":"GNU Affero General Public License v3.0","spdx_id":"AGPL-3.0","url":"https://api.github.com/licenses/agpl-3.0","node_id":"MDc6TGljZW5zZTE="},"allow_forking":true,"is_template":false,"web_commit_signoff_required":false,"has_pull_requests":true,"pull_request_creation_policy":"all","topics":["code-review","github","lookout"],"visibility":"public","forks":33,"open_issues":84,"watchers":152,"default_branch":"master"}},"_links":{"self":{"href":"https://api.github.com/repos/src-d/lookout/pulls/836"},"html":{"href":"https://github.com/src-d/lookout/pull/836"},"issue":{"href":"https://api.github.com/repos/src-d/lookout/issues/836"},"comments":{"href":"https://api.github.com/repos/src-d/lookout/issues/836/comments"},"review_comments":{"href":"https://api.github.com/repos/src-d/lookout/pulls/836/comments"},"review_comment":{"href":"https://api.github.com/repos/src-d/lookout/pulls/comments{/number}"},"commits":{"href":"https://api.github.com/repos/src-d/lookout/pulls/836/commits"},"statuses":{"href":"https://api.github.com/repos/src-d/lookout/statuses/e8f154397f8f73477984734a79ba1aa812a3ebf4"}},"author_association":"NONE","auto_merge":null,"assignee":null,"active_lock_reason":null},{"url":"https://api.github.com/repos/src-d/lookout/pulls/835","id":700821836,"node_id":"MDExOlB1bGxSZXF1ZXN0NzAwODIxODM2","html_url":"https://github.com/src-d/lookout/pull/835","diff_url":"https://github.com/src-d/lookout/pull/835.diff","patch_url":"https://github.com/src-d/lookout/pull/835.patch","issue_url":"https://api.github.com/repos/src-d/lookout/issues/835","number":835,"state":"open","locked":false,"title":"Bump @types/jest from 24.0.11 to 26.0.24 in /frontend","user":{"login":"dependabot-preview[bot]","id":27856297,"node_id":"MDM6Qm90Mjc4NTYyOTc=","avatar_url":"https://avatars.githubusercontent.com/in/2141?v=4","gravatar_id":"","url":"https://api.github.com/users/dependabot-preview%5Bbot%5D","html_url":"https://github.com/apps/dependabot-preview","followers_url":"https://api.github.com/users/dependabot-preview%5Bbot%5D/followers","following_url":"https://api.github.com/users/dependabot-preview%5Bbot%5D/following{/other_user}","gists_url":"https://api.github.com/users/dependabot-preview%5Bbot%5D/gists{/gist_id}","starred_url":"https://api.github.com/users/dependabot-preview%5Bbot%5D/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/dependabot-preview%5Bbot%5D/subscriptions","organizations_url":"https://api.github.com/users/dependabot-preview%5Bbot%5D/orgs","repos_url":"https://api.github.com/users/dependabot-preview%5Bbot%5D/repos","events_url":"https://api.github.com/users/dependabot-preview%5Bbot%5D/events{/privacy}","received_events_url":"https://api.github.com/users/dependabot-preview%5Bbot%5D/received_events","type":"Bot","user_view_type":"public","site_admin":false},"body":"Bumps [@types/jest](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/jest) from 24.0.11 to 26.0.24.\n<details>\n<summary>Commits</summary>\n<ul>\n<li>See full diff in <a href=\"https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/jest\">compare view</a></li>\n</ul>\n</details>\n<br />\n\n\n[![Dependabot compatibility score](https://api.dependabot.com/badges/compatibility_score?dependency-name=@types/jest&package-manager=npm_and_yarn&previous-version=24.0.11&new-version=26.0.24)](https://dependabot.com/compatibility-score/?dependency-name=@types/jest&package-manager=npm_and_yarn&previous-version=24.0.11&new-version=26.0.24)\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n<details>\n<summary>Dependabot commands and options</summary>\n<br />\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot merge` will merge this PR after your CI passes on it\n- `@dependabot squash and merge` will squash and merge this PR after your CI passes on it\n- `@dependabot cancel merge` will cancel a previously requested merge and block automerging\n- `@dependabot reopen` will reopen this PR if it is closed\n- `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually\n- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot use these labels` will set the current labels as the default for future PRs for this repo and language\n- `@dependabot use these reviewers` will set the current reviewers as the default for future PRs for this repo and language\n- `@dependabot use these assignees` will set the current assignees as the default for future PRs for this repo and language\n- `@dependabot use this milestone` will set the current milestone as the default for future PRs for this repo and language\n- `@dependabot badge me` will comment on this PR with code to add a \"Dependabot enabled\" badge to your readme\n\nAdditionally, you can set the following in your Dependabot [dashboard](https://app.dependabot.com):\n- Update frequency (including time of day and day of week)\n- Pull request limits (per update run and/or open at any time)\n- Automerge options (never/patch/minor, and dev/runtime dependencies)\n- Out-of-range updates (receive only lockfile updates, if desired)\n- Security updates (receive only security updates, if desired)\n\n\n\n</details>","created_at":"2021-08-01T04:18:55Z","updated_at":"2021-08-01T04:18:56Z","closed_at":null,"merged_at":null,"merge_commit_sha":"7f9eb9618ebb6897265b19385acca6a28582dcb7","assignees":[],"requested_reviewers":[],"requested_teams":[],"labels":[{"id":1224325914,"node_id":"MDU6TGFiZWwxMjI0MzI1OTE0","url":"https://api.github.com/repos/src-d/lookout/labels/dependencies","name":"dependencies","color":"0025ff","default":false,"description":"Pull requests that update a dependency file"},{"id":1225416698,"node_id":"MDU6TGFiZWwxMjI1NDE2Njk4","url":"https://api.github.com/repos/src-d/lookout/labels/javascript","name":"javascript","color":"168700","default":false,"description":"Pull requests that update Javascript code"}],"milestone":null,"draft":false,"commits_url":"https://api.github.com/repos/src-d/lookout/pulls/835/commits","review_comments_url":"https://api.github.com/repos/src-d/lookout/pulls/835/comments","review_comment_url":"https://api.github.com/repos/src-d/lookout/pulls/comments{/number}","comments_url":"https://api.github.com/repos/src-d/lookout/issues/835/comments","statuses_url":"https://api.github.com/repos/src-d/lookout/statuses/f5c424b11a99e8c8a60fe71cb0081a940537c206","head":{"label":"src-d:dependabot/npm_and_yarn/frontend/types/jest-26.0.24","ref":"dependabot/npm_and_yarn/frontend/types/jest-26.0.24","sha":"f5c424b11a99e8c8a60fe71cb0081a940537c206","user":{"login":"src-d","id":15128793,"node_id":"MDEyOk9yZ2FuaXphdGlvbjE1MTI4Nzkz","avatar_url":"https://avatars.githubusercontent.com/u/15128793?v=4","gravatar_id":"","url":"https://api.github.com/users/src-d","html_url":"https://github.com/src-d","followers_url":"https://api.github.com/users/src-d/followers","following_url":"https://api.github.com/users/src-d/following{/other_user}","gists_url":"https://api.github.com/users/src-d/gists{/gist_id}","starred_url":"https://api.github.com/users/src-d/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/src-d/subscriptions","organizations_url":"https://api.github.com/users/src-d/orgs","repos_url":"https://api.github.com/users/src-d/repos","events_url":"https://api.github.com/users/src-d/events{/privacy}","received_events_url":"https://api.github.com/users/src-d/received_events","type":"Organization","user_view_type":"public","site_admin":false},"repo":{"id":136146572,"node_id":"MDEwOlJlcG9zaXRvcnkxMzYxNDY1NzI=","name":"lookout","full_name":"src-d/lookout","private":false,"owner":{"login":"src-d","id":15128793,"node_id":"MDEyOk9yZ2FuaXphdGlvbjE1MTI4Nzkz","avatar_url":"https://avatars.githubusercontent.com/u/15128793?v=4","gravatar_id":"","url":"https://api.github.com/users/src-d","html_url":"https://github.com/src-d","followers_url":"https://api.github.com/users/src-d/followers","following_url":"https://api.github.com/users/src-d/following{/other_user}","gists_url":"https://api.github.com/users/src-d/gists{/gist_id}","starred_url":"https://api.github.com/users/src-d/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/src-d/subscriptions","organizations_url":"https://api.github.com/users/src-d/orgs","repos_url":"https://api.github.com/users/src-d/repos","events_url":"https://api.github.com/users/src-d/events{/privacy}","received_events_url":"https://api.github.com/users/src-d/received_events","type":"Organization","user_view_type":"public","site_admin":false},"html_url":"https://github.com/src-d/lookout","description":"Assisted code review, running custom code analyzers on pull requests","fork":false,"url":"https://api.github.com/repos/src-d/lookout","forks_url":"https://api.github.com/repos/src-d/lookout/forks","keys_url":"https://api.github.com/repos/src-d/lookout/keys{/key_id}","collaborators_url":"https://api.github.com/repos/src-d/lookout/collaborators{/collaborator}","teams_url":"https://api.github.com/repos/src-d/lookout/teams","hooks_url":"https://api.github.com/repos/src-d/lookout/hooks","issue_events_url":"https://api.github.com/repos/src-d/lookout/issues/events{/number}","events_url":"https://api.github.com/repos/src-d/lookout/events","assignees_url":"https://api.github.com/repos/src-d/lookout/assignees{/user}","branches_url":"https://api.github.com/repos/src-d/lookout/branches{/branch}","tags_url":"https://api.github.com/repos/src-d/lookout/tags","blobs_url":"https://api.github.com/repos/src-d/lookout/git/blobs{/sha}","git_tags_url":"https://api.github.com/repos/src-d/lookout/git/tags{/sha}","git_refs_url":"https://api.github.com/repos/src-d/lookout/git/refs{/sha}","trees_url":"https://api.github.com/repos/src-d/lookout/git/trees{/sha}","statuses_url":"https://api.github.com/repos/src-d/lookout/statuses/{sha}","languages_url":"https://api.github.com/repos/src-d/lookout/languages","stargazers_url":"https://api.github.com/repos/src-d/lookout/stargazers","contributors_url":"https://api.github.com/repos/src-d/lookout/contributors","subscribers_url":"https://api.github.com/repos/src-d/lookout/subscribers","subscription_url":"https://api.github.com/repos/src-d/lookout/subscription","commits_url":"https://api.github.com/repos/src-d/lookout/commits{/sha}","git_commits_url":"https://api.github.com/repos/src-d/lookout/git/commits{/sha}","comments_url":"https://api.github.com/repos/src-d/lookout/comments{/number}","issue_comment_url":"https://api.github.com/repos/src-d/lookout/issues/comments{/number}","contents_url":"https://api.github.com/repos/src-d/lookout/contents/{+path}","compare_url":"https://api.github.com/repos/src-d/lookout/compare/{base}...{head}","merges_url":"https://api.github.com/repos/src-d/lookout/merges","archive_url":"https://api.github.com/repos/src-d/lookout/{archive_format}{/ref}","downloads_url":"https://api.github.com/repos/src-d/lookout/downloads","issues_url":"https://api.github.com/repos/src-d/lookout/issues{/number}","pulls_url":"https://api.github.com/repos/src-d/lookout/pulls{/number}","milestones_url":"https://api.github.com/repos/src-d/lookout/milestones{/number}","notifications_url":"https://api.github.com/repos/src-d/lookout/notifications{?since,all,participating}","labels_url":"https://api.github.com/repos/src-d/lookout/labels{/name}","releases_url":"https://api.github.com/repos/src-d/lookout/releases{/id}","deployments_url":"https://api.github.com/repos/src-d/lookout/deployments","created_at":"2018-06-05T08:37:23Z","updated_at":"2025-10-05T17:39:33Z","pushed_at":"2021-08-03T19:18:36Z","git_url":"git://github.com/src-d/lookout.git","ssh_url":"git@github.com:src-d/lookout.git","clone_url":"https://github.com/src-d/lookout.git","svn_url":"https://github.com/src-d/lookout","homepage":"https://docs.sourced.tech/lookout","size":60130,"stargazers_count":152,"watchers_count":152,"language":"Go","has_issues":true,"has_projects":false,"has_downloads":true,"has_wiki":false,"has_pages":false,"has_discussions":false,"forks_count":33,"mirror_url":null,"archived":false,"disabled":false,"open_issues_count":84,"license":{"key":"agpl-3.0","name":"GNU Affero General Public License v3.0","spdx_id":"AGPL-3.0","url":"https://api.github.com/licenses/agpl-3.0","node_id":"MDc6TGljZW5zZTE="},"allow_forking":true,"is_template":false,"web_commit_signoff_required":false,"has_pull_requests":true,"pull_request_creation_policy":"all","topics":["code-review","github","lookout"],"visibility":"public","forks":33,"open_issues":84,"watchers":152,"default_branch":"master"}},"base":{"label":"src-d:master","ref":"master","sha":"d5cccd9aed531327965c374533f42e0469af4cda","user":{"login":"src-d","id":15128793,"node_id":"MDEyOk9yZ2FuaXphdGlvbjE1MTI4Nzkz","avatar_url":"https://avatars.githubusercontent.com/u/15128793?v=4","gravatar_id":"","url":"https://api.github.com/users/src-d","html_url":"https://github.com/src-d","followers_url":"https://api.github.com/users/src-d/followers","following_url":"https://api.github.com/users/src-d/following{/other_user}","gists_url":"https://api.github.com/users/src-d/gists{/gist_id}","starred_url":"https://api.github.com/users/src-d/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/src-d/subscriptions","organizations_url":"https://api.github.com/users/src-d/orgs","repos_url":"https://api.github.com/users/src-d/repos","events_url":"https://api.github.com/users/src-d/events{/privacy}","received_events_url":"https://api.github.com/users/src-d/received_events","type":"Organization","user_view_type":"public","site_admin":false},"repo":{"id":136146572,"node_id":"MDEwOlJlcG9zaXRvcnkxMzYxNDY1NzI=","name":"lookout","full_name":"src-d/lookout","private":false,"owner":{"login":"src-d","id":15128793,"node_id":"MDEyOk9yZ2FuaXphdGlvbjE1MTI4Nzkz","avatar_url":"https://avatars.githubusercontent.com/u/15128793?v=4","gravatar_id":"","url":"https://api.github.com/users/src-d","html_url":"https://github.com/src-d","followers_url":"https://api.github.com/users/src-d/followers","following_url":"https://api.github.com/users/src-d/following{/other_user}","gists_url":"https://api.github.com/users/src-d/gists{/gist_id}","starred_url":"https://api.github.com/users/src-d/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/src-d/subscriptions","organizations_url":"https://api.github.com/users/src-d/orgs","repos_url":"https://api.github.com/users/src-d/repos","events_url":"https://api.github.com/users/src-d/events{/privacy}","received_events_url":"https://api.github.com/users/src-d/received_events","type":"Organization","user_view_type":"public","site_admin":false},"html_url":"https://github.com/src-d/lookout","description":"Assisted code review, running custom code analyzers on pull requests","fork":false,"url":"https://api.github.com/repos/src-d/lookout","forks_url":"https://api.github.com/repos/src-d/lookout/forks","keys_url":"https://api.github.com/repos/src-d/lookout/keys{/key_id}","collaborators_url":"https://api.github.com/repos/src-d/lookout/collaborators{/collaborator}","teams_url":"https://api.github.com/repos/src-d/lookout/teams","hooks_url":"https://api.github.com/repos/src-d/lookout/hooks","issue_events_url":"https://api.github.com/repos/src-d/lookout/issues/events{/number}","events_url":"https://api.github.com/repos/src-d/lookout/events","assignees_url":"https://api.github.com/repos/src-d/lookout/assignees{/user}","branches_url":"https://api.github.com/repos/src-d/lookout/branches{/branch}","tags_url":"https://api.github.com/repos/src-d/lookout/tags","blobs_url":"https://api.github.com/repos/src-d/lookout/git/blobs{/sha}","git_tags_url":"https://api.github.com/repos/src-d/lookout/git/tags{/sha}","git_refs_url":"https://api.github.com/repos/src-d/lookout/git/refs{/sha}","trees_url":"https://api.github.com/repos/src-d/lookout/git/trees{/sha}","statuses_url":"https://api.github.com/repos/src-d/lookout/statuses/{sha}","languages_url":"https://api.github.com/repos/src-d/lookout/languages","stargazers_url":"https://api.github.com/repos/src-d/lookout/stargazers","contributors_url":"https://api.github.com/repos/src-d/lookout/contributors","subscribers_url":"https://api.github.com/repos/src-d/lookout/subscribers","subscription_url":"https://api.github.com/repos/src-d/lookout/subscription","commits_url":"https://api.github.com/repos/src-d/lookout/commits{/sha}","git_commits_url":"https://api.github.com/repos/src-d/lookout/git/commits{/sha}","comments_url":"https://api.github.com/repos/src-d/lookout/comments{/number}","issue_comment_url":"https://api.github.com/repos/src-d/lookout/issues/comments{/number}","contents_url":"https://api.github.com/repos/src-d/lookout/contents/{+path}","compare_url":"https://api.github.com/repos/src-d/lookout/compare/{base}...{head}","merges_url":"https://api.github.com/repos/src-d/lookout/merges","archive_url":"https://api.github.com/repos/src-d/lookout/{archive_format}{/ref}","downloads_url":"https://api.github.com/repos/src-d/lookout/downloads","issues_url":"https://api.github.com/repos/src-d/lookout/issues{/number}","pulls_url":"https://api.github.com/repos/src-d/lookout/pulls{/number}","milestones_url":"https://api.github.com/repos/src-d/lookout/milestones{/number}","notifications_url":"https://api.github.com/repos/src-d/lookout/notifications{?since,all,participating}","labels_url":"https://api.github.com/repos/src-d/lookout/labels{/name}","releases_url":"https://api.github.com/repos/src-d/lookout/releases{/id}","deployments_url":"https://api.github.com/repos/src-d/lookout/deployments","created_at":"2018-06-05T08:37:23Z","updated_at":"2025-10-05T17:39:33Z","pushed_at":"2021-08-03T19:18:36Z","git_url":"git://github.com/src-d/lookout.git","ssh_url":"git@github.com:src-d/lookout.git","clone_url":"https://github.com/src-d/lookout.git","svn_url":"https://github.com/src-d/lookout","homepage":"https://docs.sourced.tech/lookout","size":60130,"stargazers_count":152,"watchers_count":152,"language":"Go","has_issues":true,"has_projects":false,"has_downloads":true,"has_wiki":false,"has_pages":false,"has_discussions":false,"forks_count":33,"mirror_url":null,"archived":false,"disabled":false,"open_issues_count":84,"license":{"key":"agpl-3.0","name":"GNU Affero General Public License v3.0","spdx_id":"AGPL-3.0","url":"https://api.github.com/licenses/agpl-3.0","node_id":"MDc6TGljZW5zZTE="},"allow_forking":true,"is_template":false,"web_commit_signoff_required":false,"has_pull_requests":true,"pull_request_creation_policy":"all","topics":["code-review","github","lookout"],"visibility":"public","forks":33,"open_issues":84,"watchers":152,"default_branch":"master"}},"_links":{"self":{"href":"https://api.github.com/repos/src-d/lookout/pulls/835"},"html":{"href":"https://github.com/src-d/lookout/pull/835"},"issue":{"href":"https://api.github.com/repos/src-d/lookout/issues/835"},"comments":{"href":"https://api.github.com/repos/src-d/lookout/issues/835/comments"},"review_comments":{"href":"https://api.github.com/repos/src-d/lookout/pulls/835/comments"},"review_comment":{"href":"https://api.github.com/repos/src-d/lookout/pulls/comments{/number}"},"commits":{"href":"https://api.github.com/repos/src-d/lookout/pulls/835/commits"},"statuses":{"href":"https://api.github.com/repos/src-d/lookout/statuses/f5c424b11a99e8c8a60fe71cb0081a940537c206"}},"author_association":"NONE","auto_merge":null,"assignee":null,"active_lock_reason":null},{"url":"https://api.github.com/repos/src-d/lookout/pulls/834","id":700821604,"node_id":"MDExOlB1bGxSZXF1ZXN0NzAwODIxNjA0","html_url":"https://github.com/src-d/lookout/pull/834","diff_url":"https://github.com/src-d/lookout/pull/834.diff","patch_url":"https://github.com/src-d/lookout/pull/834.patch","issue_url":"https://api.github.com/repos/src-d/lookout/issues/834","number":834,"state":"open","locked":false,"title":"Bump @types/react from 16.8.7 to 17.0.15 in /frontend","user":{"login":"dependabot-preview[bot]","id":27856297,"node_id":"MDM6Qm90Mjc4NTYyOTc=","avatar_url":"https://avatars.githubusercontent.com/in/2141?v=4","gravatar_id":"","url":"https://api.github.com/users/dependabot-preview%5Bbot%5D","html_url":"https://github.com/apps/dependabot-preview","followers_url":"https://api.github.com/users/dependabot-preview%5Bbot%5D/followers","following_url":"https://api.github.com/users/dependabot-preview%5Bbot%5D/following{/other_user}","gists_url":"https://api.github.com/users/dependabot-preview%5Bbot%5D/gists{/gist_id}","starred_url":"https://api.github.com/users/dependabot-preview%5Bbot%5D/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/dependabot-preview%5Bbot%5D/subscriptions","organizations_url":"https://api.github.com/users/dependabot-preview%5Bbot%5D/orgs","repos_url":"https://api.github.com/users/dependabot-preview%5Bbot%5D/repos","events_url":"https://api.github.com/users/dependabot-preview%5Bbot%5D/events{/privacy}","received_events_url":"https://api.github.com/users/dependabot-preview%5Bbot%5D/received_events","type":"Bot","user_view_type":"public","site_admin":false},"body":"Bumps [@types/react](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/react) from 16.8.7 to 17.0.15.\n<details>\n<summary>Commits</summary>\n<ul>\n<li>See full diff in <a href=\"https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/react\">compare view</a></li>\n</ul>\n</details>\n<br />\n\n\n[![Dependabot compatibility score](https://api.dependabot.com/badges/compatibility_score?dependency-name=@types/react&package-manager=npm_and_yarn&previous-version=16.8.7&new-version=17.0.15)](https://dependabot.com/compatibility-score/?dependency-name=@types/react&package-manager=npm_and_yarn&previous-version=16.8.7&new-version=17.0.15)\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n<details>\n<summary>Dependabot commands and options</summary>\n<br />\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot merge` will merge this PR after your CI passes on it\n- `@dependabot squash and merge` will squash and merge this PR after your CI passes on it\n- `@dependabot cancel merge` will cancel a previously requested merge and block automerging\n- `@dependabot reopen` will reopen this PR if it is closed\n- `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually\n- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot use these labels` will set the current labels as the default for future PRs for this repo and language\n- `@dependabot use these reviewers` will set the current reviewers as the default for future PRs for this repo and language\n- `@dependabot use these assignees` will set the current assignees as the default for future PRs for this repo and language\n- `@dependabot use this milestone` will set the current milestone as the default for future PRs for this repo and language\n- `@dependabot badge me` will comment on this PR with code to add a \"Dependabot enabled\" badge to your readme\n\nAdditionally, you can set the following in your Dependabot [dashboard](https://app.dependabot.com):\n- Update frequency (including time of day and day of week)\n- Pull request limits (per update run and/or open at any time)\n- Automerge options (never/patch/minor, and dev/runtime dependencies)\n- Out-of-range updates (receive only lockfile updates, if desired)\n- Security updates (receive only security updates, if desired)\n\n\n\n</details>","created_at":"2021-08-01T04:18:00Z","updated_at":"2021-08-01T04:18:01Z","closed_at":null,"merged_at":null,"merge_commit_sha":"4983b1b9392315fd326826641542334e03eebf03","assignees":[],"requested_reviewers":[],"requested_teams":[],"labels":[{"id":1224325914,"node_id":"MDU6TGFiZWwxMjI0MzI1OTE0","url":"https://api.github.com/repos/src-d/lookout/labels/dependencies","name":"dependencies","color":"0025ff","default":false,"description":"Pull requests that update a dependency file"},{"id":1225416698,"node_id":"MDU6TGFiZWwxMjI1NDE2Njk4","url":"https://api.github.com/repos/src-d/lookout/labels/javascript","name":"javascript","color":"168700","default":false,"description":"Pull requests that update Javascript code"}],"milestone":null,"draft":false,"commits_url":"https://api.github.com/repos/src-d/lookout/pulls/834/commits","review_comments_url":"https://api.github.com/repos/src-d/lookout/pulls/834/comments","review_comment_url":"https://api.github.com/repos/src-d/lookout/pulls/comments{/number}","comments_url":"https://api.github.com/repos/src-d/lookout/issues/834/comments","statuses_url":"https://api.github.com/repos/src-d/lookout/statuses/701257c7a54e2a3f12478a26048e1f18ffab759c","head":{"label":"src-d:dependabot/npm_and_yarn/frontend/types/react-17.0.15","ref":"dependabot/npm_and_yarn/frontend/types/react-17.0.15","sha":"701257c7a54e2a3f12478a26048e1f18ffab759c","user":{"login":"src-d","id":15128793,"node_id":"MDEyOk9yZ2FuaXphdGlvbjE1MTI4Nzkz","avatar_url":"https://avatars.githubusercontent.com/u/15128793?v=4","gravatar_id":"","url":"https://api.github.com/users/src-d","html_url":"https://github.com/src-d","followers_url":"https://api.github.com/users/src-d/followers","following_url":"https://api.github.com/users/src-d/following{/other_user}","gists_url":"https://api.github.com/users/src-d/gists{/gist_id}","starred_url":"https://api.github.com/users/src-d/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/src-d/subscriptions","organizations_url":"https://api.github.com/users/src-d/orgs","repos_url":"https://api.github.com/users/src-d/repos","events_url":"https://api.github.com/users/src-d/events{/privacy}","received_events_url":"https://api.github.com/users/src-d/received_events","type":"Organization","user_view_type":"public","site_admin":false},"repo":{"id":136146572,"node_id":"MDEwOlJlcG9zaXRvcnkxMzYxNDY1NzI=","name":"lookout","full_name":"src-d/lookout","private":false,"owner":{"login":"src-d","id":15128793,"node_id":"MDEyOk9yZ2FuaXphdGlvbjE1MTI4Nzkz","avatar_url":"https://avatars.githubusercontent.com/u/15128793?v=4","gravatar_id":"","url":"https://api.github.com/users/src-d","html_url":"https://github.com/src-d","followers_url":"https://api.github.com/users/src-d/followers","following_url":"https://api.github.com/users/src-d/following{/other_user}","gists_url":"https://api.github.com/users/src-d/gists{/gist_id}","starred_url":"https://api.github.com/users/src-d/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/src-d/subscriptions","organizations_url":"https://api.github.com/users/src-d/orgs","repos_url":"https://api.github.com/users/src-d/repos","events_url":"https://api.github.com/users/src-d/events{/privacy}","received_events_url":"https://api.github.com/users/src-d/received_events","type":"Organization","user_view_type":"public","site_admin":false},"html_url":"https://github.com/src-d/lookout","description":"Assisted code review, running custom code analyzers on pull requests","fork":false,"url":"https://api.github.com/repos/src-d/lookout","forks_url":"https://api.github.com/repos/src-d/lookout/forks","keys_url":"https://api.github.com/repos/src-d/lookout/keys{/key_id}","collaborators_url":"https://api.github.com/repos/src-d/lookout/collaborators{/collaborator}","teams_url":"https://api.github.com/repos/src-d/lookout/teams","hooks_url":"https://api.github.com/repos/src-d/lookout/hooks","issue_events_url":"https://api.github.com/repos/src-d/lookout/issues/events{/number}","events_url":"https://api.github.com/repos/src-d/lookout/events","assignees_url":"https://api.github.com/repos/src-d/lookout/assignees{/user}","branches_url":"https://api.github.com/repos/src-d/lookout/branches{/branch}","tags_url":"https://api.github.com/repos/src-d/lookout/tags","blobs_url":"https://api.github.com/repos/src-d/lookout/git/blobs{/sha}","git_tags_url":"https://api.github.com/repos/src-d/lookout/git/tags{/sha}","git_refs_url":"https://api.github.com/repos/src-d/lookout/git/refs{/sha}","trees_url":"https://api.github.com/repos/src-d/lookout/git/trees{/sha}","statuses_url":"https://api.github.com/repos/src-d/lookout/statuses/{sha}","languages_url":"https://api.github.com/repos/src-d/lookout/languages","stargazers_url":"https://api.github.com/repos/src-d/lookout/stargazers","contributors_url":"https://api.github.com/repos/src-d/lookout/contributors","subscribers_url":"https://api.github.com/repos/src-d/lookout/subscribers","subscription_url":"https://api.github.com/repos/src-d/lookout/subscription","commits_url":"https://api.github.com/repos/src-d/lookout/commits{/sha}","git_commits_url":"https://api.github.com/repos/src-d/lookout/git/commits{/sha}","comments_url":"https://api.github.com/repos/src-d/lookout/comments{/number}","issue_comment_url":"https://api.github.com/repos/src-d/lookout/issues/comments{/number}","contents_url":"https://api.github.com/repos/src-d/lookout/contents/{+path}","compare_url":"https://api.github.com/repos/src-d/lookout/compare/{base}...{head}","merges_url":"https://api.github.com/repos/src-d/lookout/merges","archive_url":"https://api.github.com/repos/src-d/lookout/{archive_format}{/ref}","downloads_url":"https://api.github.com/repos/src-d/lookout/downloads","issues_url":"https://api.github.com/repos/src-d/lookout/issues{/number}","pulls_url":"https://api.github.com/repos/src-d/lookout/pulls{/number}","milestones_url":"https://api.github.com/repos/src-d/lookout/milestones{/number}","notifications_url":"https://api.github.com/repos/src-d/lookout/notifications{?since,all,participating}","labels_url":"https://api.github.com/repos/src-d/lookout/labels{/name}","releases_url":"https://api.github.com/repos/src-d/lookout/releases{/id}","deployments_url":"https://api.github.com/repos/src-d/lookout/deployments","created_at":"2018-06-05T08:37:23Z","updated_at":"2025-10-05T17:39:33Z","pushed_at":"2021-08-03T19:18:36Z","git_url":"git://github.com/src-d/lookout.git","ssh_url":"git@github.com:src-d/lookout.git","clone_url":"https://github.com/src-d/lookout.git","svn_url":"https://github.com/src-d/lookout","homepage":"https://docs.sourced.tech/lookout","size":60130,"stargazers_count":152,"watchers_count":152,"language":"Go","has_issues":true,"has_projects":false,"has_downloads":true,"has_wiki":false,"has_pages":false,"has_discussions":false,"forks_count":33,"mirror_url":null,"archived":false,"disabled":false,"open_issues_count":84,"license":{"key":"agpl-3.0","name":"GNU Affero General Public License v3.0","spdx_id":"AGPL-3.0","url":"https://api.github.com/licenses/agpl-3.0","node_id":"MDc6TGljZW5zZTE="},"allow_forking":true,"is_template":false,"web_commit_signoff_required":false,"has_pull_requests":true,"pull_request_creation_policy":"all","topics":["code-review","github","lookout"],"visibility":"public","forks":33,"open_issues":84,"watchers":152,"default_branch":"master"}},"base":{"label":"src-d:master","ref":"master","sha":"d5cccd9aed531327965c374533f42e0469af4cda","user":{"login":"src-d","id":15128793,"node_id":"MDEyOk9yZ2FuaXphdGlvbjE1MTI4Nzkz","avatar_url":"https://avatars.githubusercontent.com/u/15128793?v=4","gravatar_id":"","url":"https://api.github.com/users/src-d","html_url":"https://github.com/src-d","followers_url":"https://api.github.com/users/src-d/followers","following_url":"https://api.github.com/users/src-d/following{/other_user}","gists_url":"https://api.github.com/users/src-d/gists{/gist_id}","starred_url":"https://api.github.com/users/src-d/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/src-d/subscriptions","organizations_url":"https://api.github.com/users/src-d/orgs","repos_url":"https://api.github.com/users/src-d/repos","events_url":"https://api.github.com/users/src-d/events{/privacy}","received_events_url":"https://api.github.com/users/src-d/received_events","type":"Organization","user_view_type":"public","site_admin":false},"repo":{"id":136146572,"node_id":"MDEwOlJlcG9zaXRvcnkxMzYxNDY1NzI=","name":"lookout","full_name":"src-d/lookout","private":false,"owner":{"login":"src-d","id":15128793,"node_id":"MDEyOk9yZ2FuaXphdGlvbjE1MTI4Nzkz","avatar_url":"https://avatars.githubusercontent.com/u/15128793?v=4","gravatar_id":"","url":"https://api.github.com/users/src-d","html_url":"https://github.com/src-d","followers_url":"https://api.github.com/users/src-d/followers","following_url":"https://api.github.com/users/src-d/following{/other_user}","gists_url":"https://api.github.com/users/src-d/gists{/gist_id}","starred_url":"https://api.github.com/users/src-d/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/src-d/subscriptions","organizations_url":"https://api.github.com/users/src-d/orgs","repos_url":"https://api.github.com/users/src-d/repos","events_url":"https://api.github.com/users/src-d/events{/privacy}","received_events_url":"https://api.github.com/users/src-d/received_events","type":"Organization","user_view_type":"public","site_admin":false},"html_url":"https://github.com/src-d/lookout","description":"Assisted code review, running custom code analyzers on pull requests","fork":false,"url":"https://api.github.com/repos/src-d/lookout","forks_url":"https://api.github.com/repos/src-d/lookout/forks","keys_url":"https://api.github.com/repos/src-d/lookout/keys{/key_id}","collaborators_url":"https://api.github.com/repos/src-d/lookout/collaborators{/collaborator}","teams_url":"https://api.github.com/repos/src-d/lookout/teams","hooks_url":"https://api.github.com/repos/src-d/lookout/hooks","issue_events_url":"https://api.github.com/repos/src-d/lookout/issues/events{/number}","events_url":"https://api.github.com/repos/src-d/lookout/events","assignees_url":"https://api.github.com/repos/src-d/lookout/assignees{/user}","branches_url":"https://api.github.com/repos/src-d/lookout/branches{/branch}","tags_url":"https://api.github.com/repos/src-d/lookout/tags","blobs_url":"https://api.github.com/repos/src-d/lookout/git/blobs{/sha}","git_tags_url":"https://api.github.com/repos/src-d/lookout/git/tags{/sha}","git_refs_url":"https://api.github.com/repos/src-d/lookout/git/refs{/sha}","trees_url":"https://api.github.com/repos/src-d/lookout/git/trees{/sha}","statuses_url":"https://api.github.com/repos/src-d/lookout/statuses/{sha}","languages_url":"https://api.github.com/repos/src-d/lookout/languages","stargazers_url":"https://api.github.com/repos/src-d/lookout/stargazers","contributors_url":"https://api.github.com/repos/src-d/lookout/contributors","subscribers_url":"https://api.github.com/repos/src-d/lookout/subscribers","subscription_url":"https://api.github.com/repos/src-d/lookout/subscription","commits_url":"https://api.github.com/repos/src-d/lookout/commits{/sha}","git_commits_url":"https://api.github.com/repos/src-d/lookout/git/commits{/sha}","comments_url":"https://api.github.com/repos/src-d/lookout/comments{/number}","issue_comment_url":"https://api.github.com/repos/src-d/lookout/issues/comments{/number}","contents_url":"https://api.github.com/repos/src-d/lookout/contents/{+path}","compare_url":"https://api.github.com/repos/src-d/lookout/compare/{base}...{head}","merges_url":"https://api.github.com/repos/src-d/lookout/merges","archive_url":"https://api.github.com/repos/src-d/lookout/{archive_format}{/ref}","downloads_url":"https://api.github.com/repos/src-d/lookout/downloads","issues_url":"https://api.github.com/repos/src-d/lookout/issues{/number}","pulls_url":"https://api.github.com/repos/src-d/lookout/pulls{/number}","milestones_url":"https://api.github.com/repos/src-d/lookout/milestones{/number}","notifications_url":"https://api.github.com/repos/src-d/lookout/notifications{?since,all,participating}","labels_url":"https://api.github.com/repos/src-d/lookout/labels{/name}","releases_url":"https://api.github.com/repos/src-d/lookout/releases{/id}","deployments_url":"https://api.github.com/repos/src-d/lookout/deployments","created_at":"2018-06-05T08:37:23Z","updated_at":"2025-10-05T17:39:33Z","pushed_at":"2021-08-03T19:18:36Z","git_url":"git://github.com/src-d/lookout.git","ssh_url":"git@github.com:src-d/lookout.git","clone_url":"https://github.com/src-d/lookout.git","svn_url":"https://github.com/src-d/lookout","homepage":"https://docs.sourced.tech/lookout","size":60130,"stargazers_count":152,"watchers_count":152,"language":"Go","has_issues":true,"has_projects":false,"has_downloads":true,"has_wiki":false,"has_pages":false,"has_discussions":false,"forks_count":33,"mirror_url":null,"archived":false,"disabled":false,"open_issues_count":84,"license":{"key":"agpl-3.0","name":"GNU Affero General Public License v3.0","spdx_id":"AGPL-3.0","url":"https://api.github.com/licenses/agpl-3.0","node_id":"MDc6TGljZW5zZTE="},"allow_forking":true,"is_template":false,"web_commit_signoff_required":false,"has_pull_requests":true,"pull_request_creation_policy":"all","topics":["code-review","github","lookout"],"visibility":"public","forks":33,"open_issues":84,"watchers":152,"default_branch":"master"}},"_links":{"self":{"href":"https://api.github.com/repos/src-d/lookout/pulls/834"},"html":{"href":"https://github.com/src-d/lookout/pull/834"},"issue":{"href":"https://api.github.com/repos/src-d/lookout/issues/834"},"comments":{"href":"https://api.github.com/repos/src-d/lookout/issues/834/comments"},"review_comments":{"href":"https://api.github.com/repos/src-d/lookout/pulls/834/comments"},"review_comment":{"href":"https://api.github.com/repos/src-d/lookout/pulls/comments{/number}"},"commits":{"href":"https://api.github.com/repos/src-d/lookout/pulls/834/commits"},"statuses":{"href":"https://api.github.com/repos/src-d/lookout/statuses/701257c7a54e2a3f12478a26048e1f18ffab759c"}},"author_association":"NONE","auto_merge":null,"assignee":null,"active_lock_reason":null},{"url":"https://api.github.com/repos/src-d/lookout/pulls/833","id":700821077,"node_id":"MDExOlB1bGxSZXF1ZXN0NzAwODIxMDc3","html_url":"https://github.com/src-d/lookout/pull/833","diff_url":"https://github.com/src-d/lookout/pull/833.diff","patch_url":"https://github.com/src-d/lookout/pull/833.patch","issue_url":"https://api.github.com/repos/src-d/lookout/issues/833","number":833,"state":"open","locked":false,"title":"Bump @types/react-dom from 16.8.2 to 17.0.9 in /frontend","user":{"login":"dependabot-preview[bot]","id":27856297,"node_id":"MDM6Qm90Mjc4NTYyOTc=","avatar_url":"https://avatars.githubusercontent.com/in/2141?v=4","gravatar_id":"","url":"https://api.github.com/users/dependabot-preview%5Bbot%5D","html_url":"https://github.com/apps/dependabot-preview","followers_url":"https://api.github.com/users/dependabot-preview%5Bbot%5D/followers","following_url":"https://api.github.com/users/dependabot-preview%5Bbot%5D/following{/other_user}","gists_url":"https://api.github.com/users/dependabot-preview%5Bbot%5D/gists{/gist_id}","starred_url":"https://api.github.com/users/dependabot-preview%5Bbot%5D/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/dependabot-preview%5Bbot%5D/subscriptions","organizations_url":"https://api.github.com/users/dependabot-preview%5Bbot%5D/orgs","repos_url":"https://api.github.com/users/dependabot-preview%5Bbot%5D/repos","events_url":"https://api.github.com/users/dependabot-preview%5Bbot%5D/events{/privacy}","received_events_url":"https://api.github.com/users/dependabot-preview%5Bbot%5D/received_events","type":"Bot","user_view_type":"public","site_admin":false},"body":"Bumps [@types/react-dom](https://github.com/DefinitelyTyped/DefinitelyTyped/tree/HEAD/types/react-dom) from 16.8.2 to 17.0.9.\n<details>\n<summary>Commits</summary>\n<ul>\n<li>See full diff in <a href=\"https://github.com/DefinitelyTyped/DefinitelyTyped/commits/HEAD/types/react-dom\">compare view</a></li>\n</ul>\n</details>\n<br />\n\n\n[![Dependabot compatibility score](https://api.dependabot.com/badges/compatibility_score?dependency-name=@types/react-dom&package-manager=npm_and_yarn&previous-version=16.8.2&new-version=17.0.9)](https://dependabot.com/compatibility-score/?dependency-name=@types/react-dom&package-manager=npm_and_yarn&previous-version=16.8.2&new-version=17.0.9)\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n<details>\n<summary>Dependabot commands and options</summary>\n<br />\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot merge` will merge this PR after your CI passes on it\n- `@dependabot squash and merge` will squash and merge this PR after your CI passes on it\n- `@dependabot cancel merge` will cancel a previously requested merge and block automerging\n- `@dependabot reopen` will reopen this PR if it is closed\n- `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually\n- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot use these labels` will set the current labels as the default for future PRs for this repo and language\n- `@dependabot use these reviewers` will set the current reviewers as the default for future PRs for this repo and language\n- `@dependabot use these assignees` will set the current assignees as the default for future PRs for this repo and language\n- `@dependabot use this milestone` will set the current milestone as the default for future PRs for this repo and language\n- `@dependabot badge me` will comment on this PR with code to add a \"Dependabot enabled\" badge to your readme\n\nAdditionally, you can set the following in your Dependabot [dashboard](https://app.dependabot.com):\n- Update frequency (including time of day and day of week)\n- Pull request limits (per update run and/or open at any time)\n- Automerge options (never/patch/minor, and dev/runtime dependencies)\n- Out-of-range updates (receive only lockfile updates, if desired)\n- Security updates (receive only security updates, if desired)\n\n\n\n</details>","created_at":"2021-08-01T04:16:05Z","updated_at":"2021-08-01T04:16:06Z","closed_at":null,"merged_at":null,"merge_commit_sha":"e341816b1adac48926990196350dfbb430412b99","assignees":[],"requested_reviewers":[],"requested_teams":[],"labels":[{"id":1224325914,"node_id":"MDU6TGFiZWwxMjI0MzI1OTE0","url":"https://api.github.com/repos/src-d/lookout/labels/dependencies","name":"dependencies","color":"0025ff","default":false,"description":"Pull requests that update a dependency file"},{"id":1225416698,"node_id":"MDU6TGFiZWwxMjI1NDE2Njk4","url":"https://api.github.com/repos/src-d/lookout/labels/javascript","name":"javascript","color":"168700","default":false,"description":"Pull requests that update Javascript code"}],"milestone":null,"draft":false,"commits_url":"https://api.github.com/repos/src-d/lookout/pulls/833/commits","review_comments_url":"https://api.github.com/repos/src-d/lookout/pulls/833/comments","review_comment_url":"https://api.github.com/repos/src-d/lookout/pulls/comments{/number}","comments_url":"https://api.github.com/repos/src-d/lookout/issues/833/comments","statuses_url":"https://api.github.com/repos/src-d/lookout/statuses/3233001cc9700f3ef3a814e91ebbe36da2248fb9","head":{"label":"src-d:dependabot/npm_and_yarn/frontend/types/react-dom-17.0.9","ref":"dependabot/npm_and_yarn/frontend/types/react-dom-17.0.9","sha":"3233001cc9700f3ef3a814e91ebbe36da2248fb9","user":{"login":"src-d","id":15128793,"node_id":"MDEyOk9yZ2FuaXphdGlvbjE1MTI4Nzkz","avatar_url":"https://avatars.githubusercontent.com/u/15128793?v=4","gravatar_id":"","url":"https://api.github.com/users/src-d","html_url":"https://github.com/src-d","followers_url":"https://api.github.com/users/src-d/followers","following_url":"https://api.github.com/users/src-d/following{/other_user}","gists_url":"https://api.github.com/users/src-d/gists{/gist_id}","starred_url":"https://api.github.com/users/src-d/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/src-d/subscriptions","organizations_url":"https://api.github.com/users/src-d/orgs","repos_url":"https://api.github.com/users/src-d/repos","events_url":"https://api.github.com/users/src-d/events{/privacy}","received_events_url":"https://api.github.com/users/src-d/received_events","type":"Organization","user_view_type":"public","site_admin":false},"repo":{"id":136146572,"node_id":"MDEwOlJlcG9zaXRvcnkxMzYxNDY1NzI=","name":"lookout","full_name":"src-d/lookout","private":false,"owner":{"login":"src-d","id":15128793,"node_id":"MDEyOk9yZ2FuaXphdGlvbjE1MTI4Nzkz","avatar_url":"https://avatars.githubusercontent.com/u/15128793?v=4","gravatar_id":"","url":"https://api.github.com/users/src-d","html_url":"https://github.com/src-d","followers_url":"https://api.github.com/users/src-d/followers","following_url":"https://api.github.com/users/src-d/following{/other_user}","gists_url":"https://api.github.com/users/src-d/gists{/gist_id}","starred_url":"https://api.github.com/users/src-d/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/src-d/subscriptions","organizations_url":"https://api.github.com/users/src-d/orgs","repos_url":"https://api.github.com/users/src-d/repos","events_url":"https://api.github.com/users/src-d/events{/privacy}","received_events_url":"https://api.github.com/users/src-d/received_events","type":"Organization","user_view_type":"public","site_admin":false},"html_url":"https://github.com/src-d/lookout","description":"Assisted code review, running custom code analyzers on pull requests","fork":false,"url":"https://api.github.com/repos/src-d/lookout","forks_url":"https://api.github.com/repos/src-d/lookout/forks","keys_url":"https://api.github.com/repos/src-d/lookout/keys{/key_id}","collaborators_url":"https://api.github.com/repos/src-d/lookout/collaborators{/collaborator}","teams_url":"https://api.github.com/repos/src-d/lookout/teams","hooks_url":"https://api.github.com/repos/src-d/lookout/hooks","issue_events_url":"https://api.github.com/repos/src-d/lookout/issues/events{/number}","events_url":"https://api.github.com/repos/src-d/lookout/events","assignees_url":"https://api.github.com/repos/src-d/lookout/assignees{/user}","branches_url":"https://api.github.com/repos/src-d/lookout/branches{/branch}","tags_url":"https://api.github.com/repos/src-d/lookout/tags","blobs_url":"https://api.github.com/repos/src-d/lookout/git/blobs{/sha}","git_tags_url":"https://api.github.com/repos/src-d/lookout/git/tags{/sha}","git_refs_url":"https://api.github.com/repos/src-d/lookout/git/refs{/sha}","trees_url":"https://api.github.com/repos/src-d/lookout/git/trees{/sha}","statuses_url":"https://api.github.com/repos/src-d/lookout/statuses/{sha}","languages_url":"https://api.github.com/repos/src-d/lookout/languages","stargazers_url":"https://api.github.com/repos/src-d/lookout/stargazers","contributors_url":"https://api.github.com/repos/src-d/lookout/contributors","subscribers_url":"https://api.github.com/repos/src-d/lookout/subscribers","subscription_url":"https://api.github.com/repos/src-d/lookout/subscription","commits_url":"https://api.github.com/repos/src-d/lookout/commits{/sha}","git_commits_url":"https://api.github.com/repos/src-d/lookout/git/commits{/sha}","comments_url":"https://api.github.com/repos/src-d/lookout/comments{/number}","issue_comment_url":"https://api.github.com/repos/src-d/lookout/issues/comments{/number}","contents_url":"https://api.github.com/repos/src-d/lookout/contents/{+path}","compare_url":"https://api.github.com/repos/src-d/lookout/compare/{base}...{head}","merges_url":"https://api.github.com/repos/src-d/lookout/merges","archive_url":"https://api.github.com/repos/src-d/lookout/{archive_format}{/ref}","downloads_url":"https://api.github.com/repos/src-d/lookout/downloads","issues_url":"https://api.github.com/repos/src-d/lookout/issues{/number}","pulls_url":"https://api.github.com/repos/src-d/lookout/pulls{/number}","milestones_url":"https://api.github.com/repos/src-d/lookout/milestones{/number}","notifications_url":"https://api.github.com/repos/src-d/lookout/notifications{?since,all,participating}","labels_url":"https://api.github.com/repos/src-d/lookout/labels{/name}","releases_url":"https://api.github.com/repos/src-d/lookout/releases{/id}","deployments_url":"https://api.github.com/repos/src-d/lookout/deployments","created_at":"2018-06-05T08:37:23Z","updated_at":"2025-10-05T17:39:33Z","pushed_at":"2021-08-03T19:18:36Z","git_url":"git://github.com/src-d/lookout.git","ssh_url":"git@github.com:src-d/lookout.git","clone_url":"https://github.com/src-d/lookout.git","svn_url":"https://github.com/src-d/lookout","homepage":"https://docs.sourced.tech/lookout","size":60130,"stargazers_count":152,"watchers_count":152,"language":"Go","has_issues":true,"has_projects":false,"has_downloads":true,"has_wiki":false,"has_pages":false,"has_discussions":false,"forks_count":33,"mirror_url":null,"archived":false,"disabled":false,"open_issues_count":84,"license":{"key":"agpl-3.0","name":"GNU Affero General Public License v3.0","spdx_id":"AGPL-3.0","url":"https://api.github.com/licenses/agpl-3.0","node_id":"MDc6TGljZW5zZTE="},"allow_forking":true,"is_template":false,"web_commit_signoff_required":false,"has_pull_requests":true,"pull_request_creation_policy":"all","topics":["code-review","github","lookout"],"visibility":"public","forks":33,"open_issues":84,"watchers":152,"default_branch":"master"}},"base":{"label":"src-d:master","ref":"master","sha":"d5cccd9aed531327965c374533f42e0469af4cda","user":{"login":"src-d","id":15128793,"node_id":"MDEyOk9yZ2FuaXphdGlvbjE1MTI4Nzkz","avatar_url":"https://avatars.githubusercontent.com/u/15128793?v=4","gravatar_id":"","url":"https://api.github.com/users/src-d","html_url":"https://github.com/src-d","followers_url":"https://api.github.com/users/src-d/followers","following_url":"https://api.github.com/users/src-d/following{/other_user}","gists_url":"https://api.github.com/users/src-d/gists{/gist_id}","starred_url":"https://api.github.com/users/src-d/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/src-d/subscriptions","organizations_url":"https://api.github.com/users/src-d/orgs","repos_url":"https://api.github.com/users/src-d/repos","events_url":"https://api.github.com/users/src-d/events{/privacy}","received_events_url":"https://api.github.com/users/src-d/received_events","type":"Organization","user_view_type":"public","site_admin":false},"repo":{"id":136146572,"node_id":"MDEwOlJlcG9zaXRvcnkxMzYxNDY1NzI=","name":"lookout","full_name":"src-d/lookout","private":false,"owner":{"login":"src-d","id":15128793,"node_id":"MDEyOk9yZ2FuaXphdGlvbjE1MTI4Nzkz","avatar_url":"https://avatars.githubusercontent.com/u/15128793?v=4","gravatar_id":"","url":"https://api.github.com/users/src-d","html_url":"https://github.com/src-d","followers_url":"https://api.github.com/users/src-d/followers","following_url":"https://api.github.com/users/src-d/following{/other_user}","gists_url":"https://api.github.com/users/src-d/gists{/gist_id}","starred_url":"https://api.github.com/users/src-d/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/src-d/subscriptions","organizations_url":"https://api.github.com/users/src-d/orgs","repos_url":"https://api.github.com/users/src-d/repos","events_url":"https://api.github.com/users/src-d/events{/privacy}","received_events_url":"https://api.github.com/users/src-d/received_events","type":"Organization","user_view_type":"public","site_admin":false},"html_url":"https://github.com/src-d/lookout","description":"Assisted code review, running custom code analyzers on pull requests","fork":false,"url":"https://api.github.com/repos/src-d/lookout","forks_url":"https://api.github.com/repos/src-d/lookout/forks","keys_url":"https://api.github.com/repos/src-d/lookout/keys{/key_id}","collaborators_url":"https://api.github.com/repos/src-d/lookout/collaborators{/collaborator}","teams_url":"https://api.github.com/repos/src-d/lookout/teams","hooks_url":"https://api.github.com/repos/src-d/lookout/hooks","issue_events_url":"https://api.github.com/repos/src-d/lookout/issues/events{/number}","events_url":"https://api.github.com/repos/src-d/lookout/events","assignees_url":"https://api.github.com/repos/src-d/lookout/assignees{/user}","branches_url":"https://api.github.com/repos/src-d/lookout/branches{/branch}","tags_url":"https://api.github.com/repos/src-d/lookout/tags","blobs_url":"https://api.github.com/repos/src-d/lookout/git/blobs{/sha}","git_tags_url":"https://api.github.com/repos/src-d/lookout/git/tags{/sha}","git_refs_url":"https://api.github.com/repos/src-d/lookout/git/refs{/sha}","trees_url":"https://api.github.com/repos/src-d/lookout/git/trees{/sha}","statuses_url":"https://api.github.com/repos/src-d/lookout/statuses/{sha}","languages_url":"https://api.github.com/repos/src-d/lookout/languages","stargazers_url":"https://api.github.com/repos/src-d/lookout/stargazers","contributors_url":"https://api.github.com/repos/src-d/lookout/contributors","subscribers_url":"https://api.github.com/repos/src-d/lookout/subscribers","subscription_url":"https://api.github.com/repos/src-d/lookout/subscription","commits_url":"https://api.github.com/repos/src-d/lookout/commits{/sha}","git_commits_url":"https://api.github.com/repos/src-d/lookout/git/commits{/sha}","comments_url":"https://api.github.com/repos/src-d/lookout/comments{/number}","issue_comment_url":"https://api.github.com/repos/src-d/lookout/issues/comments{/number}","contents_url":"https://api.github.com/repos/src-d/lookout/contents/{+path}","compare_url":"https://api.github.com/repos/src-d/lookout/compare/{base}...{head}","merges_url":"https://api.github.com/repos/src-d/lookout/merges","archive_url":"https://api.github.com/repos/src-d/lookout/{archive_format}{/ref}","downloads_url":"https://api.github.com/repos/src-d/lookout/downloads","issues_url":"https://api.github.com/repos/src-d/lookout/issues{/number}","pulls_url":"https://api.github.com/repos/src-d/lookout/pulls{/number}","milestones_url":"https://api.github.com/repos/src-d/lookout/milestones{/number}","notifications_url":"https://api.github.com/repos/src-d/lookout/notifications{?since,all,participating}","labels_url":"https://api.github.com/repos/src-d/lookout/labels{/name}","releases_url":"https://api.github.com/repos/src-d/lookout/releases{/id}","deployments_url":"https://api.github.com/repos/src-d/lookout/deployments","created_at":"2018-06-05T08:37:23Z","updated_at":"2025-10-05T17:39:33Z","pushed_at":"2021-08-03T19:18:36Z","git_url":"git://github.com/src-d/lookout.git","ssh_url":"git@github.com:src-d/lookout.git","clone_url":"https://github.com/src-d/lookout.git","svn_url":"https://github.com/src-d/lookout","homepage":"https://docs.sourced.tech/lookout","size":60130,"stargazers_count":152,"watchers_count":152,"language":"Go","has_issues":true,"has_projects":false,"has_downloads":true,"has_wiki":false,"has_pages":false,"has_discussions":false,"forks_count":33,"mirror_url":null,"archived":false,"disabled":false,"open_issues_count":84,"license":{"key":"agpl-3.0","name":"GNU Affero General Public License v3.0","spdx_id":"AGPL-3.0","url":"https://api.github.com/licenses/agpl-3.0","node_id":"MDc6TGljZW5zZTE="},"allow_forking":true,"is_template":false,"web_commit_signoff_required":false,"has_pull_requests":true,"pull_request_creation_policy":"all","topics":["code-review","github","lookout"],"visibility":"public","forks":33,"open_issues":84,"watchers":152,"default_branch":"master"}},"_links":{"self":{"href":"https://api.github.com/repos/src-d/lookout/pulls/833"},"html":{"href":"https://github.com/src-d/lookout/pull/833"},"issue":{"href":"https://api.github.com/repos/src-d/lookout/issues/833"},"comments":{"href":"https://api.github.com/repos/src-d/lookout/issues/833/comments"},"review_comments":{"href":"https://api.github.com/repos/src-d/lookout/pulls/833/comments"},"review_comment":{"href":"https://api.github.com/repos/src-d/lookout/pulls/comments{/number}"},"commits":{"href":"https://api.github.com/repos/src-d/lookout/pulls/833/commits"},"statuses":{"href":"https://api.github.com/repos/src-d/lookout/statuses/3233001cc9700f3ef3a814e91ebbe36da2248fb9"}},"author_association":"NONE","auto_merge":null,"assignee":null,"active_lock_reason":null},{"url":"https://api.github.com/repos/src-d/lookout/pulls/832","id":700819975,"node_id":"MDExOlB1bGxSZXF1ZXN0NzAwODE5OTc1","html_url":"https://github.com/src-d/lookout/pull/832","diff_url":"https://github.com/src-d/lookout/pull/832.diff","patch_url":"https://github.com/src-d/lookout/pull/832.patch","issue_url":"https://api.github.com/repos/src-d/lookout/issues/832","number":832,"state":"open","locked":false,"title":"[Security] Bump ws from 5.2.2 to 5.2.3 in /frontend","user":{"login":"dependabot-preview[bot]","id":27856297,"node_id":"MDM6Qm90Mjc4NTYyOTc=","avatar_url":"https://avatars.githubusercontent.com/in/2141?v=4","gravatar_id":"","url":"https://api.github.com/users/dependabot-preview%5Bbot%5D","html_url":"https://github.com/apps/dependabot-preview","followers_url":"https://api.github.com/users/dependabot-preview%5Bbot%5D/followers","following_url":"https://api.github.com/users/dependabot-preview%5Bbot%5D/following{/other_user}","gists_url":"https://api.github.com/users/dependabot-preview%5Bbot%5D/gists{/gist_id}","starred_url":"https://api.github.com/users/dependabot-preview%5Bbot%5D/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/dependabot-preview%5Bbot%5D/subscriptions","organizations_url":"https://api.github.com/users/dependabot-preview%5Bbot%5D/orgs","repos_url":"https://api.github.com/users/dependabot-preview%5Bbot%5D/repos","events_url":"https://api.github.com/users/dependabot-preview%5Bbot%5D/events{/privacy}","received_events_url":"https://api.github.com/users/dependabot-preview%5Bbot%5D/received_events","type":"Bot","user_view_type":"public","site_admin":false},"body":"Bumps [ws](https://github.com/websockets/ws) from 5.2.2 to 5.2.3. **This update includes a security fix.**\n<details>\n<summary>Vulnerabilities fixed</summary>\n<p><em>Sourced from <a href=\"https://github.com/advisories/GHSA-6fc8-4gx4-v693\">The GitHub Security Advisory Database</a>.</em></p>\n<blockquote>\n<p><strong>ReDoS in Sec-Websocket-Protocol header</strong></p>\n<h3>Impact</h3>\n<p>A specially crafted value of the <code>Sec-Websocket-Protocol</code> header can be used to significantly slow down a ws server.</p>\n<h3>Proof of concept</h3>\n<pre lang=\"js\"><code>for (const length of [1000, 2000, 4000, 8000, 16000, 32000]) {\n  const value = 'b' + ' '.repeat(length) + 'x';\n  const start = process.hrtime.bigint();\n<p>value.trim().split(/ *, */);</p>\n<p>const end = process.hrtime.bigint();</p>\n<p>console.log('length = %d, time = %f ns', length, end - start);\n}\n</code></pre></p>\n<h3>Patches</h3>\n<!-- raw HTML omitted -->\n</blockquote>\n<p>... (truncated)</p>\n<blockquote>\n<p>Affected versions: &lt; 5.2.3</p>\n</blockquote>\n</details>\n<details>\n<summary>Release notes</summary>\n<p><em>Sourced from <a href=\"https://github.com/websockets/ws/releases\">ws's releases</a>.</em></p>\n<blockquote>\n<h2>5.2.3</h2>\n<h1>Bug fixes</h1>\n<ul>\n<li>Backported 00c425ec to the 5.x release line (76d47c14).</li>\n</ul>\n</blockquote>\n</details>\n<details>\n<summary>Commits</summary>\n<ul>\n<li><a href=\"https://github.com/websockets/ws/commit/6dd88e7e968ef2416445d8f8620c17d99b15c77c\"><code>6dd88e7</code></a> [dist] 5.2.3</li>\n<li><a href=\"https://github.com/websockets/ws/commit/76d47c1479002022a3e4357b3c9f0e23a68d4cd2\"><code>76d47c1</code></a> [security] Fix ReDoS vulnerability</li>\n<li>See full diff in <a href=\"https://github.com/websockets/ws/compare/5.2.2...5.2.3\">compare view</a></li>\n</ul>\n</details>\n<br />\n\n\n[![Dependabot compatibility score](https://api.dependabot.com/badges/compatibility_score?dependency-name=ws&package-manager=npm_and_yarn&previous-version=5.2.2&new-version=5.2.3)](https://dependabot.com/compatibility-score/?dependency-name=ws&package-manager=npm_and_yarn&previous-version=5.2.2&new-version=5.2.3)\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n<details>\n<summary>Dependabot commands and options</summary>\n<br />\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot merge` will merge this PR after your CI passes on it\n- `@dependabot squash and merge` will squash and merge this PR after your CI passes on it\n- `@dependabot cancel merge` will cancel a previously requested merge and block automerging\n- `@dependabot reopen` will reopen this PR if it is closed\n- `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually\n- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot use these labels` will set the current labels as the default for future PRs for this repo and language\n- `@dependabot use these reviewers` will set the current reviewers as the default for future PRs for this repo and language\n- `@dependabot use these assignees` will set the current assignees as the default for future PRs for this repo and language\n- `@dependabot use this milestone` will set the current milestone as the default for future PRs for this repo and language\n- `@dependabot badge me` will comment on this PR with code to add a \"Dependabot enabled\" badge to your readme\n\nAdditionally, you can set the following in your Dependabot [dashboard](https://app.dependabot.com):\n- Update frequency (including time of day and day of week)\n- Pull request limits (per update run and/or open at any time)\n- Automerge options (never/patch/minor, and dev/runtime dependencies)\n- Out-of-range updates (receive only lockfile updates, if desired)\n- Security updates (receive only security updates, if desired)\n\n\n\n</details>","created_at":"2021-08-01T04:12:35Z","updated_at":"2021-08-01T04:12:36Z","closed_at":null,"merged_at":null,"merge_commit_sha":"2e831742f7f831f936575dc3bca3a5230ca0a761","assignees":[],"requested_reviewers":[],"requested_teams":[],"labels":[{"id":1224325914,"node_id":"MDU6TGFiZWwxMjI0MzI1OTE0","url":"https://api.github.com/repos/src-d/lookout/labels/dependencies","name":"dependencies","color":"0025ff","default":false,"description":"Pull requests that update a dependency file"},{"id":1225416698,"node_id":"MDU6TGFiZWwxMjI1NDE2Njk4","url":"https://api.github.com/repos/src-d/lookout/labels/javascript","name":"javascript","color":"168700","default":false,"description":"Pull requests that update Javascript code"},{"id":1445656551,"node_id":"MDU6TGFiZWwxNDQ1NjU2NTUx","url":"https://api.github.com/repos/src-d/lookout/labels/security","name":"security","color":"ee0701","default":false,"description":"Pull requests that address a security vulnerability"}],"milestone":null,"draft":false,"commits_url":"https://api.github.com/repos/src-d/lookout/pulls/832/commits","review_comments_url":"https://api.github.com/repos/src-d/lookout/pulls/832/comments","review_comment_url":"https://api.github.com/repos/src-d/lookout/pulls/comments{/number}","comments_url":"https://api.github.com/repos/src-d/lookout/issues/832/comments","statuses_url":"https://api.github.com/repos/src-d/lookout/statuses/5dd1241d1b4a1bb8c9a839e04182c2c00c5ff15c","head":{"label":"src-d:dependabot/npm_and_yarn/frontend/ws-5.2.3","ref":"dependabot/npm_and_yarn/frontend/ws-5.2.3","sha":"5dd1241d1b4a1bb8c9a839e04182c2c00c5ff15c","user":{"login":"src-d","id":15128793,"node_id":"MDEyOk9yZ2FuaXphdGlvbjE1MTI4Nzkz","avatar_url":"https://avatars.githubusercontent.com/u/15128793?v=4","gravatar_id":"","url":"https://api.github.com/users/src-d","html_url":"https://github.com/src-d","followers_url":"https://api.github.com/users/src-d/followers","following_url":"https://api.github.com/users/src-d/following{/other_user}","gists_url":"https://api.github.com/users/src-d/gists{/gist_id}","starred_url":"https://api.github.com/users/src-d/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/src-d/subscriptions","organizations_url":"https://api.github.com/users/src-d/orgs","repos_url":"https://api.github.com/users/src-d/repos","events_url":"https://api.github.com/users/src-d/events{/privacy}","received_events_url":"https://api.github.com/users/src-d/received_events","type":"Organization","user_view_type":"public","site_admin":false},"repo":{"id":136146572,"node_id":"MDEwOlJlcG9zaXRvcnkxMzYxNDY1NzI=","name":"lookout","full_name":"src-d/lookout","private":false,"owner":{"login":"src-d","id":15128793,"node_id":"MDEyOk9yZ2FuaXphdGlvbjE1MTI4Nzkz","avatar_url":"https://avatars.githubusercontent.com/u/15128793?v=4","gravatar_id":"","url":"https://api.github.com/users/src-d","html_url":"https://github.com/src-d","followers_url":"https://api.github.com/users/src-d/followers","following_url":"https://api.github.com/users/src-d/following{/other_user}","gists_url":"https://api.github.com/users/src-d/gists{/gist_id}","starred_url":"https://api.github.com/users/src-d/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/src-d/subscriptions","organizations_url":"https://api.github.com/users/src-d/orgs","repos_url":"https://api.github.com/users/src-d/repos","events_url":"https://api.github.com/users/src-d/events{/privacy}","received_events_url":"https://api.github.com/users/src-d/received_events","type":"Organization","user_view_type":"public","site_admin":false},"html_url":"https://github.com/src-d/lookout","description":"Assisted code review, running custom code analyzers on pull requests","fork":false,"url":"https://api.github.com/repos/src-d/lookout","forks_url":"https://api.github.com/repos/src-d/lookout/forks","keys_url":"https://api.github.com/repos/src-d/lookout/keys{/key_id}","collaborators_url":"https://api.github.com/repos/src-d/lookout/collaborators{/collaborator}","teams_url":"https://api.github.com/repos/src-d/lookout/teams","hooks_url":"https://api.github.com/repos/src-d/lookout/hooks","issue_events_url":"https://api.github.com/repos/src-d/lookout/issues/events{/number}","events_url":"https://api.github.com/repos/src-d/lookout/events","assignees_url":"https://api.github.com/repos/src-d/lookout/assignees{/user}","branches_url":"https://api.github.com/repos/src-d/lookout/branches{/branch}","tags_url":"https://api.github.com/repos/src-d/lookout/tags","blobs_url":"https://api.github.com/repos/src-d/lookout/git/blobs{/sha}","git_tags_url":"https://api.github.com/repos/src-d/lookout/git/tags{/sha}","git_refs_url":"https://api.github.com/repos/src-d/lookout/git/refs{/sha}","trees_url":"https://api.github.com/repos/src-d/lookout/git/trees{/sha}","statuses_url":"https://api.github.com/repos/src-d/lookout/statuses/{sha}","languages_url":"https://api.github.com/repos/src-d/lookout/languages","stargazers_url":"https://api.github.com/repos/src-d/lookout/stargazers","contributors_url":"https://api.github.com/repos/src-d/lookout/contributors","subscribers_url":"https://api.github.com/repos/src-d/lookout/subscribers","subscription_url":"https://api.github.com/repos/src-d/lookout/subscription","commits_url":"https://api.github.com/repos/src-d/lookout/commits{/sha}","git_commits_url":"https://api.github.com/repos/src-d/lookout/git/commits{/sha}","comments_url":"https://api.github.com/repos/src-d/lookout/comments{/number}","issue_comment_url":"https://api.github.com/repos/src-d/lookout/issues/comments{/number}","contents_url":"https://api.github.com/repos/src-d/lookout/contents/{+path}","compare_url":"https://api.github.com/repos/src-d/lookout/compare/{base}...{head}","merges_url":"https://api.github.com/repos/src-d/lookout/merges","archive_url":"https://api.github.com/repos/src-d/lookout/{archive_format}{/ref}","downloads_url":"https://api.github.com/repos/src-d/lookout/downloads","issues_url":"https://api.github.com/repos/src-d/lookout/issues{/number}","pulls_url":"https://api.github.com/repos/src-d/lookout/pulls{/number}","milestones_url":"https://api.github.com/repos/src-d/lookout/milestones{/number}","notifications_url":"https://api.github.com/repos/src-d/lookout/notifications{?since,all,participating}","labels_url":"https://api.github.com/repos/src-d/lookout/labels{/name}","releases_url":"https://api.github.com/repos/src-d/lookout/releases{/id}","deployments_url":"https://api.github.com/repos/src-d/lookout/deployments","created_at":"2018-06-05T08:37:23Z","updated_at":"2025-10-05T17:39:33Z","pushed_at":"2021-08-03T19:18:36Z","git_url":"git://github.com/src-d/lookout.git","ssh_url":"git@github.com:src-d/lookout.git","clone_url":"https://github.com/src-d/lookout.git","svn_url":"https://github.com/src-d/lookout","homepage":"https://docs.sourced.tech/lookout","size":60130,"stargazers_count":152,"watchers_count":152,"language":"Go","has_issues":true,"has_projects":false,"has_downloads":true,"has_wiki":false,"has_pages":false,"has_discussions":false,"forks_count":33,"mirror_url":null,"archived":false,"disabled":false,"open_issues_count":84,"license":{"key":"agpl-3.0","name":"GNU Affero General Public License v3.0","spdx_id":"AGPL-3.0","url":"https://api.github.com/licenses/agpl-3.0","node_id":"MDc6TGljZW5zZTE="},"allow_forking":true,"is_template":false,"web_commit_signoff_required":false,"has_pull_requests":true,"pull_request_creation_policy":"all","topics":["code-review","github","lookout"],"visibility":"public","forks":33,"open_issues":84,"watchers":152,"default_branch":"master"}},"base":{"label":"src-d:master","ref":"master","sha":"d5cccd9aed531327965c374533f42e0469af4cda","user":{"login":"src-d","id":15128793,"node_id":"MDEyOk9yZ2FuaXphdGlvbjE1MTI4Nzkz","avatar_url":"https://avatars.githubusercontent.com/u/15128793?v=4","gravatar_id":"","url":"https://api.github.com/users/src-d","html_url":"https://github.com/src-d","followers_url":"https://api.github.com/users/src-d/followers","following_url":"https://api.github.com/users/src-d/following{/other_user}","gists_url":"https://api.github.com/users/src-d/gists{/gist_id}","starred_url":"https://api.github.com/users/src-d/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/src-d/subscriptions","organizations_url":"https://api.github.com/users/src-d/orgs","repos_url":"https://api.github.com/users/src-d/repos","events_url":"https://api.github.com/users/src-d/events{/privacy}","received_events_url":"https://api.github.com/users/src-d/received_events","type":"Organization","user_view_type":"public","site_admin":false},"repo":{"id":136146572,"node_id":"MDEwOlJlcG9zaXRvcnkxMzYxNDY1NzI=","name":"lookout","full_name":"src-d/lookout","private":false,"owner":{"login":"src-d","id":15128793,"node_id":"MDEyOk9yZ2FuaXphdGlvbjE1MTI4Nzkz","avatar_url":"https://avatars.githubusercontent.com/u/15128793?v=4","gravatar_id":"","url":"https://api.github.com/users/src-d","html_url":"https://github.com/src-d","followers_url":"https://api.github.com/users/src-d/followers","following_url":"https://api.github.com/users/src-d/following{/other_user}","gists_url":"https://api.github.com/users/src-d/gists{/gist_id}","starred_url":"https://api.github.com/users/src-d/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/src-d/subscriptions","organizations_url":"https://api.github.com/users/src-d/orgs","repos_url":"https://api.github.com/users/src-d/repos","events_url":"https://api.github.com/users/src-d/events{/privacy}","received_events_url":"https://api.github.com/users/src-d/received_events","type":"Organization","user_view_type":"public","site_admin":false},"html_url":"https://github.com/src-d/lookout","description":"Assisted code review, running custom code analyzers on pull requests","fork":false,"url":"https://api.github.com/repos/src-d/lookout","forks_url":"https://api.github.com/repos/src-d/lookout/forks","keys_url":"https://api.github.com/repos/src-d/lookout/keys{/key_id}","collaborators_url":"https://api.github.com/repos/src-d/lookout/collaborators{/collaborator}","teams_url":"https://api.github.com/repos/src-d/lookout/teams","hooks_url":"https://api.github.com/repos/src-d/lookout/hooks","issue_events_url":"https://api.github.com/repos/src-d/lookout/issues/events{/number}","events_url":"https://api.github.com/repos/src-d/lookout/events","assignees_url":"https://api.github.com/repos/src-d/lookout/assignees{/user}","branches_url":"https://api.github.com/repos/src-d/lookout/branches{/branch}","tags_url":"https://api.github.com/repos/src-d/lookout/tags","blobs_url":"https://api.github.com/repos/src-d/lookout/git/blobs{/sha}","git_tags_url":"https://api.github.com/repos/src-d/lookout/git/tags{/sha}","git_refs_url":"https://api.github.com/repos/src-d/lookout/git/refs{/sha}","trees_url":"https://api.github.com/repos/src-d/lookout/git/trees{/sha}","statuses_url":"https://api.github.com/repos/src-d/lookout/statuses/{sha}","languages_url":"https://api.github.com/repos/src-d/lookout/languages","stargazers_url":"https://api.github.com/repos/src-d/lookout/stargazers","contributors_url":"https://api.github.com/repos/src-d/lookout/contributors","subscribers_url":"https://api.github.com/repos/src-d/lookout/subscribers","subscription_url":"https://api.github.com/repos/src-d/lookout/subscription","commits_url":"https://api.github.com/repos/src-d/lookout/commits{/sha}","git_commits_url":"https://api.github.com/repos/src-d/lookout/git/commits{/sha}","comments_url":"https://api.github.com/repos/src-d/lookout/comments{/number}","issue_comment_url":"https://api.github.com/repos/src-d/lookout/issues/comments{/number}","contents_url":"https://api.github.com/repos/src-d/lookout/contents/{+path}","compare_url":"https://api.github.com/repos/src-d/lookout/compare/{base}...{head}","merges_url":"https://api.github.com/repos/src-d/lookout/merges","archive_url":"https://api.github.com/repos/src-d/lookout/{archive_format}{/ref}","downloads_url":"https://api.github.com/repos/src-d/lookout/downloads","issues_url":"https://api.github.com/repos/src-d/lookout/issues{/number}","pulls_url":"https://api.github.com/repos/src-d/lookout/pulls{/number}","milestones_url":"https://api.github.com/repos/src-d/lookout/milestones{/number}","notifications_url":"https://api.github.com/repos/src-d/lookout/notifications{?since,all,participating}","labels_url":"https://api.github.com/repos/src-d/lookout/labels{/name}","releases_url":"https://api.github.com/repos/src-d/lookout/releases{/id}","deployments_url":"https://api.github.com/repos/src-d/lookout/deployments","created_at":"2018-06-05T08:37:23Z","updated_at":"2025-10-05T17:39:33Z","pushed_at":"2021-08-03T19:18:36Z","git_url":"git://github.com/src-d/lookout.git","ssh_url":"git@github.com:src-d/lookout.git","clone_url":"https://github.com/src-d/lookout.git","svn_url":"https://github.com/src-d/lookout","homepage":"https://docs.sourced.tech/lookout","size":60130,"stargazers_count":152,"watchers_count":152,"language":"Go","has_issues":true,"has_projects":false,"has_downloads":true,"has_wiki":false,"has_pages":false,"has_discussions":false,"forks_count":33,"mirror_url":null,"archived":false,"disabled":false,"open_issues_count":84,"license":{"key":"agpl-3.0","name":"GNU Affero General Public License v3.0","spdx_id":"AGPL-3.0","url":"https://api.github.com/licenses/agpl-3.0","node_id":"MDc6TGljZW5zZTE="},"allow_forking":true,"is_template":false,"web_commit_signoff_required":false,"has_pull_requests":true,"pull_request_creation_policy":"all","topics":["code-review","github","lookout"],"visibility":"public","forks":33,"open_issues":84,"watchers":152,"default_branch":"master"}},"_links":{"self":{"href":"https://api.github.com/repos/src-d/lookout/pulls/832"},"html":{"href":"https://github.com/src-d/lookout/pull/832"},"issue":{"href":"https://api.github.com/repos/src-d/lookout/issues/832"},"comments":{"href":"https://api.github.com/repos/src-d/lookout/issues/832/comments"},"review_comments":{"href":"https://api.github.com/repos/src-d/lookout/pulls/832/comments"},"review_comment":{"href":"https://api.github.com/repos/src-d/lookout/pulls/comments{/number}"},"commits":{"href":"https://api.github.com/repos/src-d/lookout/pulls/832/commits"},"statuses":{"href":"https://api.github.com/repos/src-d/lookout/statuses/5dd1241d1b4a1bb8c9a839e04182c2c00c5ff15c"}},"author_association":"NONE","auto_merge":null,"assignee":null,"active_lock_reason":null},{"url":"https://api.github.com/repos/src-d/lookout/pulls/828","id":681476959,"node_id":"MDExOlB1bGxSZXF1ZXN0NjgxNDc2OTU5","html_url":"https://github.com/src-d/lookout/pull/828","diff_url":"https://github.com/src-d/lookout/pull/828.diff","patch_url":"https://github.com/src-d/lookout/pull/828.patch","issue_url":"https://api.github.com/repos/src-d/lookout/issues/828","number":828,"state":"open","locked":false,"title":"[Security] Bump dns-packet from 1.3.1 to 1.3.4 in /frontend","user":{"login":"dependabot-preview[bot]","id":27856297,"node_id":"MDM6Qm90Mjc4NTYyOTc=","avatar_url":"https://avatars.githubusercontent.com/in/2141?v=4","gravatar_id":"","url":"https://api.github.com/users/dependabot-preview%5Bbot%5D","html_url":"https://github.com/apps/dependabot-preview","followers_url":"https://api.github.com/users/dependabot-preview%5Bbot%5D/followers","following_url":"https://api.github.com/users/dependabot-preview%5Bbot%5D/following{/other_user}","gists_url":"https://api.github.com/users/dependabot-preview%5Bbot%5D/gists{/gist_id}","starred_url":"https://api.github.com/users/dependabot-preview%5Bbot%5D/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/dependabot-preview%5Bbot%5D/subscriptions","organizations_url":"https://api.github.com/users/dependabot-preview%5Bbot%5D/orgs","repos_url":"https://api.github.com/users/dependabot-preview%5Bbot%5D/repos","events_url":"https://api.github.com/users/dependabot-preview%5Bbot%5D/events{/privacy}","received_events_url":"https://api.github.com/users/dependabot-preview%5Bbot%5D/received_events","type":"Bot","user_view_type":"public","site_admin":false},"body":"Bumps [dns-packet](https://github.com/mafintosh/dns-packet) from 1.3.1 to 1.3.4. **This update includes a security fix.**\n<details>\n<summary>Vulnerabilities fixed</summary>\n<p><em>Sourced from <a href=\"https://github.com/advisories/GHSA-3wcq-x3mq-6r9p\">The GitHub Security Advisory Database</a>.</em></p>\n<blockquote>\n<p><strong>Potential memory exposure in dns-packet</strong>\nThis affects the package dns-packet before versions 1.3.2 and 5.2.2. It creates buffers with allocUnsafe and does not always fill them before forming network packets. This can expose internal application memory over unencrypted network when querying crafted invalid domain names.</p>\n<p>Affected versions: &lt; 1.3.2</p>\n</blockquote>\n</details>\n<details>\n<summary>Commits</summary>\n<ul>\n<li><a href=\"https://github.com/mafintosh/dns-packet/commit/ebdf849da5dc0d96836e87628349776c623c5be7\"><code>ebdf849</code></a> 1.3.4</li>\n<li><a href=\"https://github.com/mafintosh/dns-packet/commit/ac578722f2707310b841b65aae61d6332f8882a1\"><code>ac57872</code></a> move all allocUnsafes to allocs for easier maintenance</li>\n<li><a href=\"https://github.com/mafintosh/dns-packet/commit/c64c9507e51532c9e9a3cbefa146a134ecc025fd\"><code>c64c950</code></a> 1.3.3</li>\n<li><a href=\"https://github.com/mafintosh/dns-packet/commit/0598ba19d18da4568b32415e60a9629061b3c45c\"><code>0598ba1</code></a> fix .. in encodingLength</li>\n<li><a href=\"https://github.com/mafintosh/dns-packet/commit/010aedb33c1ee8c3f558db5249c1d46e2bd7a101\"><code>010aedb</code></a> 1.3.2</li>\n<li><a href=\"https://github.com/mafintosh/dns-packet/commit/0d0d593f8df4e2712c43957a6c62e95047f12b2d\"><code>0d0d593</code></a> backport encodingLength fix to v1</li>\n<li>See full diff in <a href=\"https://github.com/mafintosh/dns-packet/compare/v1.3.1...v1.3.4\">compare view</a></li>\n</ul>\n</details>\n<br />\n\n\n[![Dependabot compatibility score](https://api.dependabot.com/badges/compatibility_score?dependency-name=dns-packet&package-manager=npm_and_yarn&previous-version=1.3.1&new-version=1.3.4)](https://dependabot.com/compatibility-score/?dependency-name=dns-packet&package-manager=npm_and_yarn&previous-version=1.3.1&new-version=1.3.4)\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n<details>\n<summary>Dependabot commands and options</summary>\n<br />\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot merge` will merge this PR after your CI passes on it\n- `@dependabot squash and merge` will squash and merge this PR after your CI passes on it\n- `@dependabot cancel merge` will cancel a previously requested merge and block automerging\n- `@dependabot reopen` will reopen this PR if it is closed\n- `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually\n- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot use these labels` will set the current labels as the default for future PRs for this repo and language\n- `@dependabot use these reviewers` will set the current reviewers as the default for future PRs for this repo and language\n- `@dependabot use these assignees` will set the current assignees as the default for future PRs for this repo and language\n- `@dependabot use this milestone` will set the current milestone as the default for future PRs for this repo and language\n- `@dependabot badge me` will comment on this PR with code to add a \"Dependabot enabled\" badge to your readme\n\nAdditionally, you can set the following in your Dependabot [dashboard](https://app.dependabot.com):\n- Update frequency (including time of day and day of week)\n- Pull request limits (per update run and/or open at any time)\n- Automerge options (never/patch/minor, and dev/runtime dependencies)\n- Out-of-range updates (receive only lockfile updates, if desired)\n- Security updates (receive only security updates, if desired)\n\n\n\n</details>","created_at":"2021-07-01T05:17:12Z","updated_at":"2021-07-01T05:17:13Z","closed_at":null,"merged_at":null,"merge_commit_sha":"0d08901cd79975646e2b07ea09a0fa24c5a7d4ba","assignees":[],"requested_reviewers":[],"requested_teams":[],"labels":[{"id":1224325914,"node_id":"MDU6TGFiZWwxMjI0MzI1OTE0","url":"https://api.github.com/repos/src-d/lookout/labels/dependencies","name":"dependencies","color":"0025ff","default":false,"description":"Pull requests that update a dependency file"},{"id":1225416698,"node_id":"MDU6TGFiZWwxMjI1NDE2Njk4","url":"https://api.github.com/repos/src-d/lookout/labels/javascript","name":"javascript","color":"168700","default":false,"description":"Pull requests that update Javascript code"},{"id":1445656551,"node_id":"MDU6TGFiZWwxNDQ1NjU2NTUx","url":"https://api.github.com/repos/src-d/lookout/labels/security","name":"security","color":"ee0701","default":false,"description":"Pull requests that address a security vulnerability"}],"milestone":null,"draft":false,"commits_url":"https://api.github.com/repos/src-d/lookout/pulls/828/commits","review_comments_url":"https://api.github.com/repos/src-d/lookout/pulls/828/comments","review_comment_url":"https://api.github.com/repos/src-d/lookout/pulls/comments{/number}","comments_url":"https://api.github.com/repos/src-d/lookout/issues/828/comments","statuses_url":"https://api.github.com/repos/src-d/lookout/statuses/a862adbab20a5f5ba7ea445434430bb1ebe317a1","head":{"label":"src-d:dependabot/npm_and_yarn/frontend/dns-packet-1.3.4","ref":"dependabot/npm_and_yarn/frontend/dns-packet-1.3.4","sha":"a862adbab20a5f5ba7ea445434430bb1ebe317a1","user":{"login":"src-d","id":15128793,"node_id":"MDEyOk9yZ2FuaXphdGlvbjE1MTI4Nzkz","avatar_url":"https://avatars.githubusercontent.com/u/15128793?v=4","gravatar_id":"","url":"https://api.github.com/users/src-d","html_url":"https://github.com/src-d","followers_url":"https://api.github.com/users/src-d/followers","following_url":"https://api.github.com/users/src-d/following{/other_user}","gists_url":"https://api.github.com/users/src-d/gists{/gist_id}","starred_url":"https://api.github.com/users/src-d/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/src-d/subscriptions","organizations_url":"https://api.github.com/users/src-d/orgs","repos_url":"https://api.github.com/users/src-d/repos","events_url":"https://api.github.com/users/src-d/events{/privacy}","received_events_url":"https://api.github.com/users/src-d/received_events","type":"Organization","user_view_type":"public","site_admin":false},"repo":{"id":136146572,"node_id":"MDEwOlJlcG9zaXRvcnkxMzYxNDY1NzI=","name":"lookout","full_name":"src-d/lookout","private":false,"owner":{"login":"src-d","id":15128793,"node_id":"MDEyOk9yZ2FuaXphdGlvbjE1MTI4Nzkz","avatar_url":"https://avatars.githubusercontent.com/u/15128793?v=4","gravatar_id":"","url":"https://api.github.com/users/src-d","html_url":"https://github.com/src-d","followers_url":"https://api.github.com/users/src-d/followers","following_url":"https://api.github.com/users/src-d/following{/other_user}","gists_url":"https://api.github.com/users/src-d/gists{/gist_id}","starred_url":"https://api.github.com/users/src-d/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/src-d/subscriptions","organizations_url":"https://api.github.com/users/src-d/orgs","repos_url":"https://api.github.com/users/src-d/repos","events_url":"https://api.github.com/users/src-d/events{/privacy}","received_events_url":"https://api.github.com/users/src-d/received_events","type":"Organization","user_view_type":"public","site_admin":false},"html_url":"https://github.com/src-d/lookout","description":"Assisted code review, running custom code analyzers on pull requests","fork":false,"url":"https://api.github.com/repos/src-d/lookout","forks_url":"https://api.github.com/repos/src-d/lookout/forks","keys_url":"https://api.github.com/repos/src-d/lookout/keys{/key_id}","collaborators_url":"https://api.github.com/repos/src-d/lookout/collaborators{/collaborator}","teams_url":"https://api.github.com/repos/src-d/lookout/teams","hooks_url":"https://api.github.com/repos/src-d/lookout/hooks","issue_events_url":"https://api.github.com/repos/src-d/lookout/issues/events{/number}","events_url":"https://api.github.com/repos/src-d/lookout/events","assignees_url":"https://api.github.com/repos/src-d/lookout/assignees{/user}","branches_url":"https://api.github.com/repos/src-d/lookout/branches{/branch}","tags_url":"https://api.github.com/repos/src-d/lookout/tags","blobs_url":"https://api.github.com/repos/src-d/lookout/git/blobs{/sha}","git_tags_url":"https://api.github.com/repos/src-d/lookout/git/tags{/sha}","git_refs_url":"https://api.github.com/repos/src-d/lookout/git/refs{/sha}","trees_url":"https://api.github.com/repos/src-d/lookout/git/trees{/sha}","statuses_url":"https://api.github.com/repos/src-d/lookout/statuses/{sha}","languages_url":"https://api.github.com/repos/src-d/lookout/languages","stargazers_url":"https://api.github.com/repos/src-d/lookout/stargazers","contributors_url":"https://api.github.com/repos/src-d/lookout/contributors","subscribers_url":"https://api.github.com/repos/src-d/lookout/subscribers","subscription_url":"https://api.github.com/repos/src-d/lookout/subscription","commits_url":"https://api.github.com/repos/src-d/lookout/commits{/sha}","git_commits_url":"https://api.github.com/repos/src-d/lookout/git/commits{/sha}","comments_url":"https://api.github.com/repos/src-d/lookout/comments{/number}","issue_comment_url":"https://api.github.com/repos/src-d/lookout/issues/comments{/number}","contents_url":"https://api.github.com/repos/src-d/lookout/contents/{+path}","compare_url":"https://api.github.com/repos/src-d/lookout/compare/{base}...{head}","merges_url":"https://api.github.com/repos/src-d/lookout/merges","archive_url":"https://api.github.com/repos/src-d/lookout/{archive_format}{/ref}","downloads_url":"https://api.github.com/repos/src-d/lookout/downloads","issues_url":"https://api.github.com/repos/src-d/lookout/issues{/number}","pulls_url":"https://api.github.com/repos/src-d/lookout/pulls{/number}","milestones_url":"https://api.github.com/repos/src-d/lookout/milestones{/number}","notifications_url":"https://api.github.com/repos/src-d/lookout/notifications{?since,all,participating}","labels_url":"https://api.github.com/repos/src-d/lookout/labels{/name}","releases_url":"https://api.github.com/repos/src-d/lookout/releases{/id}","deployments_url":"https://api.github.com/repos/src-d/lookout/deployments","created_at":"2018-06-05T08:37:23Z","updated_at":"2025-10-05T17:39:33Z","pushed_at":"2021-08-03T19:18:36Z","git_url":"git://github.com/src-d/lookout.git","ssh_url":"git@github.com:src-d/lookout.git","clone_url":"https://github.com/src-d/lookout.git","svn_url":"https://github.com/src-d/lookout","homepage":"https://docs.sourced.tech/lookout","size":60130,"stargazers_count":152,"watchers_count":152,"language":"Go","has_issues":true,"has_projects":false,"has_downloads":true,"has_wiki":false,"has_pages":false,"has_discussions":false,"forks_count":33,"mirror_url":null,"archived":false,"disabled":false,"open_issues_count":84,"license":{"key":"agpl-3.0","name":"GNU Affero General Public License v3.0","spdx_id":"AGPL-3.0","url":"https://api.github.com/licenses/agpl-3.0","node_id":"MDc6TGljZW5zZTE="},"allow_forking":true,"is_template":false,"web_commit_signoff_required":false,"has_pull_requests":true,"pull_request_creation_policy":"all","topics":["code-review","github","lookout"],"visibility":"public","forks":33,"open_issues":84,"watchers":152,"default_branch":"master"}},"base":{"label":"src-d:master","ref":"master","sha":"d5cccd9aed531327965c374533f42e0469af4cda","user":{"login":"src-d","id":15128793,"node_id":"MDEyOk9yZ2FuaXphdGlvbjE1MTI4Nzkz","avatar_url":"https://avatars.githubusercontent.com/u/15128793?v=4","gravatar_id":"","url":"https://api.github.com/users/src-d","html_url":"https://github.com/src-d","followers_url":"https://api.github.com/users/src-d/followers","following_url":"https://api.github.com/users/src-d/following{/other_user}","gists_url":"https://api.github.com/users/src-d/gists{/gist_id}","starred_url":"https://api.github.com/users/src-d/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/src-d/subscriptions","organizations_url":"https://api.github.com/users/src-d/orgs","repos_url":"https://api.github.com/users/src-d/repos","events_url":"https://api.github.com/users/src-d/events{/privacy}","received_events_url":"https://api.github.com/users/src-d/received_events","type":"Organization","user_view_type":"public","site_admin":false},"repo":{"id":136146572,"node_id":"MDEwOlJlcG9zaXRvcnkxMzYxNDY1NzI=","name":"lookout","full_name":"src-d/lookout","private":false,"owner":{"login":"src-d","id":15128793,"node_id":"MDEyOk9yZ2FuaXphdGlvbjE1MTI4Nzkz","avatar_url":"https://avatars.githubusercontent.com/u/15128793?v=4","gravatar_id":"","url":"https://api.github.com/users/src-d","html_url":"https://github.com/src-d","followers_url":"https://api.github.com/users/src-d/followers","following_url":"https://api.github.com/users/src-d/following{/other_user}","gists_url":"https://api.github.com/users/src-d/gists{/gist_id}","starred_url":"https://api.github.com/users/src-d/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/src-d/subscriptions","organizations_url":"https://api.github.com/users/src-d/orgs","repos_url":"https://api.github.com/users/src-d/repos","events_url":"https://api.github.com/users/src-d/events{/privacy}","received_events_url":"https://api.github.com/users/src-d/received_events","type":"Organization","user_view_type":"public","site_admin":false},"html_url":"https://github.com/src-d/lookout","description":"Assisted code review, running custom code analyzers on pull requests","fork":false,"url":"https://api.github.com/repos/src-d/lookout","forks_url":"https://api.github.com/repos/src-d/lookout/forks","keys_url":"https://api.github.com/repos/src-d/lookout/keys{/key_id}","collaborators_url":"https://api.github.com/repos/src-d/lookout/collaborators{/collaborator}","teams_url":"https://api.github.com/repos/src-d/lookout/teams","hooks_url":"https://api.github.com/repos/src-d/lookout/hooks","issue_events_url":"https://api.github.com/repos/src-d/lookout/issues/events{/number}","events_url":"https://api.github.com/repos/src-d/lookout/events","assignees_url":"https://api.github.com/repos/src-d/lookout/assignees{/user}","branches_url":"https://api.github.com/repos/src-d/lookout/branches{/branch}","tags_url":"https://api.github.com/repos/src-d/lookout/tags","blobs_url":"https://api.github.com/repos/src-d/lookout/git/blobs{/sha}","git_tags_url":"https://api.github.com/repos/src-d/lookout/git/tags{/sha}","git_refs_url":"https://api.github.com/repos/src-d/lookout/git/refs{/sha}","trees_url":"https://api.github.com/repos/src-d/lookout/git/trees{/sha}","statuses_url":"https://api.github.com/repos/src-d/lookout/statuses/{sha}","languages_url":"https://api.github.com/repos/src-d/lookout/languages","stargazers_url":"https://api.github.com/repos/src-d/lookout/stargazers","contributors_url":"https://api.github.com/repos/src-d/lookout/contributors","subscribers_url":"https://api.github.com/repos/src-d/lookout/subscribers","subscription_url":"https://api.github.com/repos/src-d/lookout/subscription","commits_url":"https://api.github.com/repos/src-d/lookout/commits{/sha}","git_commits_url":"https://api.github.com/repos/src-d/lookout/git/commits{/sha}","comments_url":"https://api.github.com/repos/src-d/lookout/comments{/number}","issue_comment_url":"https://api.github.com/repos/src-d/lookout/issues/comments{/number}","contents_url":"https://api.github.com/repos/src-d/lookout/contents/{+path}","compare_url":"https://api.github.com/repos/src-d/lookout/compare/{base}...{head}","merges_url":"https://api.github.com/repos/src-d/lookout/merges","archive_url":"https://api.github.com/repos/src-d/lookout/{archive_format}{/ref}","downloads_url":"https://api.github.com/repos/src-d/lookout/downloads","issues_url":"https://api.github.com/repos/src-d/lookout/issues{/number}","pulls_url":"https://api.github.com/repos/src-d/lookout/pulls{/number}","milestones_url":"https://api.github.com/repos/src-d/lookout/milestones{/number}","notifications_url":"https://api.github.com/repos/src-d/lookout/notifications{?since,all,participating}","labels_url":"https://api.github.com/repos/src-d/lookout/labels{/name}","releases_url":"https://api.github.com/repos/src-d/lookout/releases{/id}","deployments_url":"https://api.github.com/repos/src-d/lookout/deployments","created_at":"2018-06-05T08:37:23Z","updated_at":"2025-10-05T17:39:33Z","pushed_at":"2021-08-03T19:18:36Z","git_url":"git://github.com/src-d/lookout.git","ssh_url":"git@github.com:src-d/lookout.git","clone_url":"https://github.com/src-d/lookout.git","svn_url":"https://github.com/src-d/lookout","homepage":"https://docs.sourced.tech/lookout","size":60130,"stargazers_count":152,"watchers_count":152,"language":"Go","has_issues":true,"has_projects":false,"has_downloads":true,"has_wiki":false,"has_pages":false,"has_discussions":false,"forks_count":33,"mirror_url":null,"archived":false,"disabled":false,"open_issues_count":84,"license":{"key":"agpl-3.0","name":"GNU Affero General Public License v3.0","spdx_id":"AGPL-3.0","url":"https://api.github.com/licenses/agpl-3.0","node_id":"MDc6TGljZW5zZTE="},"allow_forking":true,"is_template":false,"web_commit_signoff_required":false,"has_pull_requests":true,"pull_request_creation_policy":"all","topics":["code-review","github","lookout"],"visibility":"public","forks":33,"open_issues":84,"watchers":152,"default_branch":"master"}},"_links":{"self":{"href":"https://api.github.com/repos/src-d/lookout/pulls/828"},"html":{"href":"https://github.com/src-d/lookout/pull/828"},"issue":{"href":"https://api.github.com/repos/src-d/lookout/issues/828"},"comments":{"href":"https://api.github.com/repos/src-d/lookout/issues/828/comments"},"review_comments":{"href":"https://api.github.com/repos/src-d/lookout/pulls/828/comments"},"review_comment":{"href":"https://api.github.com/repos/src-d/lookout/pulls/comments{/number}"},"commits":{"href":"https://api.github.com/repos/src-d/lookout/pulls/828/commits"},"statuses":{"href":"https://api.github.com/repos/src-d/lookout/statuses/a862adbab20a5f5ba7ea445434430bb1ebe317a1"}},"author_association":"NONE","auto_merge":null,"assignee":null,"active_lock_reason":null},{"url":"https://api.github.com/repos/src-d/lookout/pulls/827","id":681476587,"node_id":"MDExOlB1bGxSZXF1ZXN0NjgxNDc2NTg3","html_url":"https://github.com/src-d/lookout/pull/827","diff_url":"https://github.com/src-d/lookout/pull/827.diff","patch_url":"https://github.com/src-d/lookout/pull/827.patch","issue_url":"https://api.github.com/repos/src-d/lookout/issues/827","number":827,"state":"open","locked":false,"title":"[Security] Bump color-string from 1.5.3 to 1.5.5 in /frontend","user":{"login":"dependabot-preview[bot]","id":27856297,"node_id":"MDM6Qm90Mjc4NTYyOTc=","avatar_url":"https://avatars.githubusercontent.com/in/2141?v=4","gravatar_id":"","url":"https://api.github.com/users/dependabot-preview%5Bbot%5D","html_url":"https://github.com/apps/dependabot-preview","followers_url":"https://api.github.com/users/dependabot-preview%5Bbot%5D/followers","following_url":"https://api.github.com/users/dependabot-preview%5Bbot%5D/following{/other_user}","gists_url":"https://api.github.com/users/dependabot-preview%5Bbot%5D/gists{/gist_id}","starred_url":"https://api.github.com/users/dependabot-preview%5Bbot%5D/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/dependabot-preview%5Bbot%5D/subscriptions","organizations_url":"https://api.github.com/users/dependabot-preview%5Bbot%5D/orgs","repos_url":"https://api.github.com/users/dependabot-preview%5Bbot%5D/repos","events_url":"https://api.github.com/users/dependabot-preview%5Bbot%5D/events{/privacy}","received_events_url":"https://api.github.com/users/dependabot-preview%5Bbot%5D/received_events","type":"Bot","user_view_type":"public","site_admin":false},"body":"Bumps [color-string](https://github.com/Qix-/color-string) from 1.5.3 to 1.5.5. **This update includes a security fix.**\n<details>\n<summary>Vulnerabilities fixed</summary>\n<p><em>Sourced from <a href=\"https://github.com/advisories/GHSA-257v-vj4p-3w2h\">The GitHub Security Advisory Database</a>.</em></p>\n<blockquote>\n<p><strong>Regular Expression Denial of Service (ReDOS)</strong>\nA Regular Expression Denial of Service (ReDOS) vulnerability was discovered in Color-String version 1.5.5 and below which occurs when the application is provided and checks a crafted invalid HWB string.</p>\n<p>Affected versions: &lt; 1.5.5</p>\n</blockquote>\n</details>\n<details>\n<summary>Release notes</summary>\n<p><em>Sourced from <a href=\"https://github.com/Qix-/color-string/releases\">color-string's releases</a>.</em></p>\n<blockquote>\n<h2>1.5.5 (Patch/Security Release) - hwb() ReDos patch (low-severity)</h2>\n<blockquote>\n<p>Release notes copied verbatim from the commit message, which can be found here: 0789e21284c33d89ebc4ab4ca6f759b9375ac9d3</p>\n</blockquote>\n<pre><code>Discovered by Yeting Li, c/o Colin Ife via Snyk.io.\n<p>A ReDos (Regular Expression Denial of Service) vulnerability\nwas responsibly disclosed to me via email by Colin on\nMar 5 2021 regarding an exponential time complexity for\nlinearly increasing input lengths for <code>hwb()</code> color strings.</p>\n<p>Strings reaching more than 5000 characters would see several\nmilliseconds of processing time; strings reaching more than\n50,000 characters began seeing 1500ms (1.5s) of processing time.</p>\n<p>The cause was due to a the regular expression that parses\nhwb() strings - specifically, the hue value - where\nthe integer portion of the hue value used a 0-or-more quantifier\nshortly thereafter followed by a 1-or-more quantifier.</p>\n<p>This caused excessive backtracking and a cartesian scan,\nresulting in exponential time complexity given a linear\nincrease in input length.</p>\n<p>Thank you Yeting Li and Colin Ife for bringing this to my\nattention in a secure, responsible and professional manner.</p>\n<p>A CVE will not be assigned for this vulnerability.\n</code></pre></p>\n<h2>1.5.4 (Patch Release)</h2>\n<ul>\n<li>Removes rounding of alpha values in RGBA hex (<code>#rrggbbaa</code>) and condensed-hex (<code>#rgba</code>) parsers, which caused certain unique inputs to result in identical outputs (see <a href=\"https://github.com/qix-/color/issues/174\">https://github.com/qix-/color/issues/174</a>).</li>\n</ul>\n</blockquote>\n</details>\n<details>\n<summary>Commits</summary>\n<ul>\n<li>See full diff in <a href=\"https://github.com/Qix-/color-string/commits/1.5.5\">compare view</a></li>\n</ul>\n</details>\n<br />\n\n\n[![Dependabot compatibility score](https://api.dependabot.com/badges/compatibility_score?dependency-name=color-string&package-manager=npm_and_yarn&previous-version=1.5.3&new-version=1.5.5)](https://dependabot.com/compatibility-score/?dependency-name=color-string&package-manager=npm_and_yarn&previous-version=1.5.3&new-version=1.5.5)\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n<details>\n<summary>Dependabot commands and options</summary>\n<br />\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot merge` will merge this PR after your CI passes on it\n- `@dependabot squash and merge` will squash and merge this PR after your CI passes on it\n- `@dependabot cancel merge` will cancel a previously requested merge and block automerging\n- `@dependabot reopen` will reopen this PR if it is closed\n- `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually\n- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot use these labels` will set the current labels as the default for future PRs for this repo and language\n- `@dependabot use these reviewers` will set the current reviewers as the default for future PRs for this repo and language\n- `@dependabot use these assignees` will set the current assignees as the default for future PRs for this repo and language\n- `@dependabot use this milestone` will set the current milestone as the default for future PRs for this repo and language\n- `@dependabot badge me` will comment on this PR with code to add a \"Dependabot enabled\" badge to your readme\n\nAdditionally, you can set the following in your Dependabot [dashboard](https://app.dependabot.com):\n- Update frequency (including time of day and day of week)\n- Pull request limits (per update run and/or open at any time)\n- Automerge options (never/patch/minor, and dev/runtime dependencies)\n- Out-of-range updates (receive only lockfile updates, if desired)\n- Security updates (receive only security updates, if desired)\n\n\n\n</details>","created_at":"2021-07-01T05:16:25Z","updated_at":"2021-07-01T05:16:26Z","closed_at":null,"merged_at":null,"merge_commit_sha":"1042fecafa0f6489277ab88502b30d3b5880b150","assignees":[],"requested_reviewers":[],"requested_teams":[],"labels":[{"id":1224325914,"node_id":"MDU6TGFiZWwxMjI0MzI1OTE0","url":"https://api.github.com/repos/src-d/lookout/labels/dependencies","name":"dependencies","color":"0025ff","default":false,"description":"Pull requests that update a dependency file"},{"id":1225416698,"node_id":"MDU6TGFiZWwxMjI1NDE2Njk4","url":"https://api.github.com/repos/src-d/lookout/labels/javascript","name":"javascript","color":"168700","default":false,"description":"Pull requests that update Javascript code"},{"id":1445656551,"node_id":"MDU6TGFiZWwxNDQ1NjU2NTUx","url":"https://api.github.com/repos/src-d/lookout/labels/security","name":"security","color":"ee0701","default":false,"description":"Pull requests that address a security vulnerability"}],"milestone":null,"draft":false,"commits_url":"https://api.github.com/repos/src-d/lookout/pulls/827/commits","review_comments_url":"https://api.github.com/repos/src-d/lookout/pulls/827/comments","review_comment_url":"https://api.github.com/repos/src-d/lookout/pulls/comments{/number}","comments_url":"https://api.github.com/repos/src-d/lookout/issues/827/comments","statuses_url":"https://api.github.com/repos/src-d/lookout/statuses/a00f54b91ebc5b766977d66ead9cbc5abf7330a5","head":{"label":"src-d:dependabot/npm_and_yarn/frontend/color-string-1.5.5","ref":"dependabot/npm_and_yarn/frontend/color-string-1.5.5","sha":"a00f54b91ebc5b766977d66ead9cbc5abf7330a5","user":{"login":"src-d","id":15128793,"node_id":"MDEyOk9yZ2FuaXphdGlvbjE1MTI4Nzkz","avatar_url":"https://avatars.githubusercontent.com/u/15128793?v=4","gravatar_id":"","url":"https://api.github.com/users/src-d","html_url":"https://github.com/src-d","followers_url":"https://api.github.com/users/src-d/followers","following_url":"https://api.github.com/users/src-d/following{/other_user}","gists_url":"https://api.github.com/users/src-d/gists{/gist_id}","starred_url":"https://api.github.com/users/src-d/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/src-d/subscriptions","organizations_url":"https://api.github.com/users/src-d/orgs","repos_url":"https://api.github.com/users/src-d/repos","events_url":"https://api.github.com/users/src-d/events{/privacy}","received_events_url":"https://api.github.com/users/src-d/received_events","type":"Organization","user_view_type":"public","site_admin":false},"repo":{"id":136146572,"node_id":"MDEwOlJlcG9zaXRvcnkxMzYxNDY1NzI=","name":"lookout","full_name":"src-d/lookout","private":false,"owner":{"login":"src-d","id":15128793,"node_id":"MDEyOk9yZ2FuaXphdGlvbjE1MTI4Nzkz","avatar_url":"https://avatars.githubusercontent.com/u/15128793?v=4","gravatar_id":"","url":"https://api.github.com/users/src-d","html_url":"https://github.com/src-d","followers_url":"https://api.github.com/users/src-d/followers","following_url":"https://api.github.com/users/src-d/following{/other_user}","gists_url":"https://api.github.com/users/src-d/gists{/gist_id}","starred_url":"https://api.github.com/users/src-d/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/src-d/subscriptions","organizations_url":"https://api.github.com/users/src-d/orgs","repos_url":"https://api.github.com/users/src-d/repos","events_url":"https://api.github.com/users/src-d/events{/privacy}","received_events_url":"https://api.github.com/users/src-d/received_events","type":"Organization","user_view_type":"public","site_admin":false},"html_url":"https://github.com/src-d/lookout","description":"Assisted code review, running custom code analyzers on pull requests","fork":false,"url":"https://api.github.com/repos/src-d/lookout","forks_url":"https://api.github.com/repos/src-d/lookout/forks","keys_url":"https://api.github.com/repos/src-d/lookout/keys{/key_id}","collaborators_url":"https://api.github.com/repos/src-d/lookout/collaborators{/collaborator}","teams_url":"https://api.github.com/repos/src-d/lookout/teams","hooks_url":"https://api.github.com/repos/src-d/lookout/hooks","issue_events_url":"https://api.github.com/repos/src-d/lookout/issues/events{/number}","events_url":"https://api.github.com/repos/src-d/lookout/events","assignees_url":"https://api.github.com/repos/src-d/lookout/assignees{/user}","branches_url":"https://api.github.com/repos/src-d/lookout/branches{/branch}","tags_url":"https://api.github.com/repos/src-d/lookout/tags","blobs_url":"https://api.github.com/repos/src-d/lookout/git/blobs{/sha}","git_tags_url":"https://api.github.com/repos/src-d/lookout/git/tags{/sha}","git_refs_url":"https://api.github.com/repos/src-d/lookout/git/refs{/sha}","trees_url":"https://api.github.com/repos/src-d/lookout/git/trees{/sha}","statuses_url":"https://api.github.com/repos/src-d/lookout/statuses/{sha}","languages_url":"https://api.github.com/repos/src-d/lookout/languages","stargazers_url":"https://api.github.com/repos/src-d/lookout/stargazers","contributors_url":"https://api.github.com/repos/src-d/lookout/contributors","subscribers_url":"https://api.github.com/repos/src-d/lookout/subscribers","subscription_url":"https://api.github.com/repos/src-d/lookout/subscription","commits_url":"https://api.github.com/repos/src-d/lookout/commits{/sha}","git_commits_url":"https://api.github.com/repos/src-d/lookout/git/commits{/sha}","comments_url":"https://api.github.com/repos/src-d/lookout/comments{/number}","issue_comment_url":"https://api.github.com/repos/src-d/lookout/issues/comments{/number}","contents_url":"https://api.github.com/repos/src-d/lookout/contents/{+path}","compare_url":"https://api.github.com/repos/src-d/lookout/compare/{base}...{head}","merges_url":"https://api.github.com/repos/src-d/lookout/merges","archive_url":"https://api.github.com/repos/src-d/lookout/{archive_format}{/ref}","downloads_url":"https://api.github.com/repos/src-d/lookout/downloads","issues_url":"https://api.github.com/repos/src-d/lookout/issues{/number}","pulls_url":"https://api.github.com/repos/src-d/lookout/pulls{/number}","milestones_url":"https://api.github.com/repos/src-d/lookout/milestones{/number}","notifications_url":"https://api.github.com/repos/src-d/lookout/notifications{?since,all,participating}","labels_url":"https://api.github.com/repos/src-d/lookout/labels{/name}","releases_url":"https://api.github.com/repos/src-d/lookout/releases{/id}","deployments_url":"https://api.github.com/repos/src-d/lookout/deployments","created_at":"2018-06-05T08:37:23Z","updated_at":"2025-10-05T17:39:33Z","pushed_at":"2021-08-03T19:18:36Z","git_url":"git://github.com/src-d/lookout.git","ssh_url":"git@github.com:src-d/lookout.git","clone_url":"https://github.com/src-d/lookout.git","svn_url":"https://github.com/src-d/lookout","homepage":"https://docs.sourced.tech/lookout","size":60130,"stargazers_count":152,"watchers_count":152,"language":"Go","has_issues":true,"has_projects":false,"has_downloads":true,"has_wiki":false,"has_pages":false,"has_discussions":false,"forks_count":33,"mirror_url":null,"archived":false,"disabled":false,"open_issues_count":84,"license":{"key":"agpl-3.0","name":"GNU Affero General Public License v3.0","spdx_id":"AGPL-3.0","url":"https://api.github.com/licenses/agpl-3.0","node_id":"MDc6TGljZW5zZTE="},"allow_forking":true,"is_template":false,"web_commit_signoff_required":false,"has_pull_requests":true,"pull_request_creation_policy":"all","topics":["code-review","github","lookout"],"visibility":"public","forks":33,"open_issues":84,"watchers":152,"default_branch":"master"}},"base":{"label":"src-d:master","ref":"master","sha":"d5cccd9aed531327965c374533f42e0469af4cda","user":{"login":"src-d","id":15128793,"node_id":"MDEyOk9yZ2FuaXphdGlvbjE1MTI4Nzkz","avatar_url":"https://avatars.githubusercontent.com/u/15128793?v=4","gravatar_id":"","url":"https://api.github.com/users/src-d","html_url":"https://github.com/src-d","followers_url":"https://api.github.com/users/src-d/followers","following_url":"https://api.github.com/users/src-d/following{/other_user}","gists_url":"https://api.github.com/users/src-d/gists{/gist_id}","starred_url":"https://api.github.com/users/src-d/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/src-d/subscriptions","organizations_url":"https://api.github.com/users/src-d/orgs","repos_url":"https://api.github.com/users/src-d/repos","events_url":"https://api.github.com/users/src-d/events{/privacy}","received_events_url":"https://api.github.com/users/src-d/received_events","type":"Organization","user_view_type":"public","site_admin":false},"repo":{"id":136146572,"node_id":"MDEwOlJlcG9zaXRvcnkxMzYxNDY1NzI=","name":"lookout","full_name":"src-d/lookout","private":false,"owner":{"login":"src-d","id":15128793,"node_id":"MDEyOk9yZ2FuaXphdGlvbjE1MTI4Nzkz","avatar_url":"https://avatars.githubusercontent.com/u/15128793?v=4","gravatar_id":"","url":"https://api.github.com/users/src-d","html_url":"https://github.com/src-d","followers_url":"https://api.github.com/users/src-d/followers","following_url":"https://api.github.com/users/src-d/following{/other_user}","gists_url":"https://api.github.com/users/src-d/gists{/gist_id}","starred_url":"https://api.github.com/users/src-d/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/src-d/subscriptions","organizations_url":"https://api.github.com/users/src-d/orgs","repos_url":"https://api.github.com/users/src-d/repos","events_url":"https://api.github.com/users/src-d/events{/privacy}","received_events_url":"https://api.github.com/users/src-d/received_events","type":"Organization","user_view_type":"public","site_admin":false},"html_url":"https://github.com/src-d/lookout","description":"Assisted code review, running custom code analyzers on pull requests","fork":false,"url":"https://api.github.com/repos/src-d/lookout","forks_url":"https://api.github.com/repos/src-d/lookout/forks","keys_url":"https://api.github.com/repos/src-d/lookout/keys{/key_id}","collaborators_url":"https://api.github.com/repos/src-d/lookout/collaborators{/collaborator}","teams_url":"https://api.github.com/repos/src-d/lookout/teams","hooks_url":"https://api.github.com/repos/src-d/lookout/hooks","issue_events_url":"https://api.github.com/repos/src-d/lookout/issues/events{/number}","events_url":"https://api.github.com/repos/src-d/lookout/events","assignees_url":"https://api.github.com/repos/src-d/lookout/assignees{/user}","branches_url":"https://api.github.com/repos/src-d/lookout/branches{/branch}","tags_url":"https://api.github.com/repos/src-d/lookout/tags","blobs_url":"https://api.github.com/repos/src-d/lookout/git/blobs{/sha}","git_tags_url":"https://api.github.com/repos/src-d/lookout/git/tags{/sha}","git_refs_url":"https://api.github.com/repos/src-d/lookout/git/refs{/sha}","trees_url":"https://api.github.com/repos/src-d/lookout/git/trees{/sha}","statuses_url":"https://api.github.com/repos/src-d/lookout/statuses/{sha}","languages_url":"https://api.github.com/repos/src-d/lookout/languages","stargazers_url":"https://api.github.com/repos/src-d/lookout/stargazers","contributors_url":"https://api.github.com/repos/src-d/lookout/contributors","subscribers_url":"https://api.github.com/repos/src-d/lookout/subscribers","subscription_url":"https://api.github.com/repos/src-d/lookout/subscription","commits_url":"https://api.github.com/repos/src-d/lookout/commits{/sha}","git_commits_url":"https://api.github.com/repos/src-d/lookout/git/commits{/sha}","comments_url":"https://api.github.com/repos/src-d/lookout/comments{/number}","issue_comment_url":"https://api.github.com/repos/src-d/lookout/issues/comments{/number}","contents_url":"https://api.github.com/repos/src-d/lookout/contents/{+path}","compare_url":"https://api.github.com/repos/src-d/lookout/compare/{base}...{head}","merges_url":"https://api.github.com/repos/src-d/lookout/merges","archive_url":"https://api.github.com/repos/src-d/lookout/{archive_format}{/ref}","downloads_url":"https://api.github.com/repos/src-d/lookout/downloads","issues_url":"https://api.github.com/repos/src-d/lookout/issues{/number}","pulls_url":"https://api.github.com/repos/src-d/lookout/pulls{/number}","milestones_url":"https://api.github.com/repos/src-d/lookout/milestones{/number}","notifications_url":"https://api.github.com/repos/src-d/lookout/notifications{?since,all,participating}","labels_url":"https://api.github.com/repos/src-d/lookout/labels{/name}","releases_url":"https://api.github.com/repos/src-d/lookout/releases{/id}","deployments_url":"https://api.github.com/repos/src-d/lookout/deployments","created_at":"2018-06-05T08:37:23Z","updated_at":"2025-10-05T17:39:33Z","pushed_at":"2021-08-03T19:18:36Z","git_url":"git://github.com/src-d/lookout.git","ssh_url":"git@github.com:src-d/lookout.git","clone_url":"https://github.com/src-d/lookout.git","svn_url":"https://github.com/src-d/lookout","homepage":"https://docs.sourced.tech/lookout","size":60130,"stargazers_count":152,"watchers_count":152,"language":"Go","has_issues":true,"has_projects":false,"has_downloads":true,"has_wiki":false,"has_pages":false,"has_discussions":false,"forks_count":33,"mirror_url":null,"archived":false,"disabled":false,"open_issues_count":84,"license":{"key":"agpl-3.0","name":"GNU Affero General Public License v3.0","spdx_id":"AGPL-3.0","url":"https://api.github.com/licenses/agpl-3.0","node_id":"MDc6TGljZW5zZTE="},"allow_forking":true,"is_template":false,"web_commit_signoff_required":false,"has_pull_requests":true,"pull_request_creation_policy":"all","topics":["code-review","github","lookout"],"visibility":"public","forks":33,"open_issues":84,"watchers":152,"default_branch":"master"}},"_links":{"self":{"href":"https://api.github.com/repos/src-d/lookout/pulls/827"},"html":{"href":"https://github.com/src-d/lookout/pull/827"},"issue":{"href":"https://api.github.com/repos/src-d/lookout/issues/827"},"comments":{"href":"https://api.github.com/repos/src-d/lookout/issues/827/comments"},"review_comments":{"href":"https://api.github.com/repos/src-d/lookout/pulls/827/comments"},"review_comment":{"href":"https://api.github.com/repos/src-d/lookout/pulls/comments{/number}"},"commits":{"href":"https://api.github.com/repos/src-d/lookout/pulls/827/commits"},"statuses":{"href":"https://api.github.com/repos/src-d/lookout/statuses/a00f54b91ebc5b766977d66ead9cbc5abf7330a5"}},"author_association":"NONE","auto_merge":null,"assignee":null,"active_lock_reason":null},{"url":"https://api.github.com/repos/src-d/lookout/pulls/826","id":681463810,"node_id":"MDExOlB1bGxSZXF1ZXN0NjgxNDYzODEw","html_url":"https://github.com/src-d/lookout/pull/826","diff_url":"https://github.com/src-d/lookout/pull/826.diff","patch_url":"https://github.com/src-d/lookout/pull/826.patch","issue_url":"https://api.github.com/repos/src-d/lookout/issues/826","number":826,"state":"open","locked":false,"title":"Bump google.golang.org/grpc from 1.20.1 to 1.39.0","user":{"login":"dependabot-preview[bot]","id":27856297,"node_id":"MDM6Qm90Mjc4NTYyOTc=","avatar_url":"https://avatars.githubusercontent.com/in/2141?v=4","gravatar_id":"","url":"https://api.github.com/users/dependabot-preview%5Bbot%5D","html_url":"https://github.com/apps/dependabot-preview","followers_url":"https://api.github.com/users/dependabot-preview%5Bbot%5D/followers","following_url":"https://api.github.com/users/dependabot-preview%5Bbot%5D/following{/other_user}","gists_url":"https://api.github.com/users/dependabot-preview%5Bbot%5D/gists{/gist_id}","starred_url":"https://api.github.com/users/dependabot-preview%5Bbot%5D/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/dependabot-preview%5Bbot%5D/subscriptions","organizations_url":"https://api.github.com/users/dependabot-preview%5Bbot%5D/orgs","repos_url":"https://api.github.com/users/dependabot-preview%5Bbot%5D/repos","events_url":"https://api.github.com/users/dependabot-preview%5Bbot%5D/events{/privacy}","received_events_url":"https://api.github.com/users/dependabot-preview%5Bbot%5D/received_events","type":"Bot","user_view_type":"public","site_admin":false},"body":"Bumps [google.golang.org/grpc](https://github.com/grpc/grpc-go) from 1.20.1 to 1.39.0.\n<details>\n<summary>Release notes</summary>\n<p><em>Sourced from <a href=\"https://github.com/grpc/grpc-go/releases\">google.golang.org/grpc's releases</a>.</em></p>\n<blockquote>\n<h2>Release 1.39.0</h2>\n<h1>Behavior Changes</h1>\n<ul>\n<li>csds: return empty response if xds client is not set (<a href=\"https://github-redirect.dependabot.com/grpc/grpc-go/issues/4505\">#4505</a>)</li>\n<li>metadata: convert keys to lowercase in FromContext() (<a href=\"https://github-redirect.dependabot.com/grpc/grpc-go/issues/4416\">#4416</a>)</li>\n</ul>\n<h1>New Features</h1>\n<ul>\n<li>xds: add GetServiceInfo to GRPCServer (<a href=\"https://github-redirect.dependabot.com/grpc/grpc-go/issues/4507\">#4507</a>)\n<ul>\n<li>Special Thanks: <a href=\"https://github.com/amenzhinsky\"><code>@​amenzhinsky</code></a></li>\n</ul>\n</li>\n<li>xds: add test-only injection of xds config to client and server (<a href=\"https://github-redirect.dependabot.com/grpc/grpc-go/issues/4476\">#4476</a>)</li>\n<li>server: allow PreparedMsgs to work for server streams (<a href=\"https://github-redirect.dependabot.com/grpc/grpc-go/issues/3480\">#3480</a>)\n<ul>\n<li>Special Thanks: <a href=\"https://github.com/eafzali\"><code>@​eafzali</code></a></li>\n</ul>\n</li>\n</ul>\n<h1>Performance Improvements</h1>\n<ul>\n<li>transport: remove decodeState from client &amp; server to reduce allocations (<a href=\"https://github-redirect.dependabot.com/grpc/grpc-go/issues/4423\">#4423</a>)\n<ul>\n<li>Special Thanks: <a href=\"https://github.com/JNProtzman\"><code>@​JNProtzman</code></a></li>\n</ul>\n</li>\n</ul>\n<h1>Bug Fixes</h1>\n<ul>\n<li>server: return UNIMPLEMENTED on receipt of malformed method name (<a href=\"https://github-redirect.dependabot.com/grpc/grpc-go/issues/4464\">#4464</a>)</li>\n<li>xds/rds: use 100 as default weighted cluster totalWeight instead of 0 (<a href=\"https://github-redirect.dependabot.com/grpc/grpc-go/issues/4439\">#4439</a>)\n<ul>\n<li>Special Thanks: <a href=\"https://github.com/alpha-baby\"><code>@​alpha-baby</code></a></li>\n</ul>\n</li>\n<li>transport: unblock read throttling when controlbuf exits (<a href=\"https://github-redirect.dependabot.com/grpc/grpc-go/issues/4447\">#4447</a>)</li>\n<li>client: fix status code to return Unavailable for servers shutting down instead of Unknown (<a href=\"https://github-redirect.dependabot.com/grpc/grpc-go/issues/4561\">#4561</a>)</li>\n</ul>\n<h1>Documentation</h1>\n<ul>\n<li>doc: fix broken benchmark dashboard link in README.md (<a href=\"https://github-redirect.dependabot.com/grpc/grpc-go/issues/4503\">#4503</a>)\n<ul>\n<li>Special Thanks: <a href=\"https://github.com/laststem\"><code>@​laststem</code></a></li>\n</ul>\n</li>\n<li>example: improve hello world server with starting msg (<a href=\"https://github-redirect.dependabot.com/grpc/grpc-go/issues/4468\">#4468</a>)\n<ul>\n<li>Special Thanks: <a href=\"https://github.com/dkkb\"><code>@​dkkb</code></a></li>\n</ul>\n</li>\n<li>client: Clarify that WaitForReady will block for CONNECTING channels (<a href=\"https://github-redirect.dependabot.com/grpc/grpc-go/issues/4477\">#4477</a>)\n<ul>\n<li>Special Thanks: <a href=\"https://github.com/evanj\"><code>@​evanj</code></a></li>\n</ul>\n</li>\n</ul>\n<h2>Release 1.38.1</h2>\n<p>internal/transport: do not mask ConnectionError (<a href=\"https://github-redirect.dependabot.com/grpc/grpc-go/issues/4561\">#4561</a>)</p>\n<h2>Release 1.38.0</h2>\n<h1>API Changes</h1>\n<ul>\n<li>reflection: accept interface instead of grpc.Server struct in Register() (<a href=\"https://github-redirect.dependabot.com/grpc/grpc-go/issues/4340\">#4340</a>)</li>\n<li>resolver: add error return value from ClientConn.UpdateState (<a href=\"https://github-redirect.dependabot.com/grpc/grpc-go/issues/4270\">#4270</a>)</li>\n</ul>\n<h1>Behavior Changes</h1>\n<ul>\n<li>client: do not poll name resolver when errors or bad updates are reported (<a href=\"https://github-redirect.dependabot.com/grpc/grpc-go/issues/4270\">#4270</a>)</li>\n<li>transport: InTapHandle may return RPC status errors; no longer RST_STREAMs (<a href=\"https://github-redirect.dependabot.com/grpc/grpc-go/issues/4365\">#4365</a>)</li>\n</ul>\n<!-- raw HTML omitted -->\n</blockquote>\n<p>... (truncated)</p>\n</details>\n<details>\n<summary>Commits</summary>\n<ul>\n<li><a href=\"https://github.com/grpc/grpc-go/commit/ebf6a4b476dc7c1bcb57c82e9c74529a7f046710\"><code>ebf6a4b</code></a> Change version to 1.39.0 (<a href=\"https://github-redirect.dependabot.com/grpc/grpc-go/issues/4541\">#4541</a>)</li>\n<li><a href=\"https://github.com/grpc/grpc-go/commit/20551e1783f8fddc9265c9c2c68e6b27c5334bbd\"><code>20551e1</code></a> internal/transport: do not mask ConnectionError (<a href=\"https://github-redirect.dependabot.com/grpc/grpc-go/issues/4561\">#4561</a>) (<a href=\"https://github-redirect.dependabot.com/grpc/grpc-go/issues/4569\">#4569</a>)</li>\n<li><a href=\"https://github.com/grpc/grpc-go/commit/22c535818725b54cc34ccbc4b953318f19bc13a6\"><code>22c5358</code></a> xds: add HashPolicy fields to RDS update (<a href=\"https://github-redirect.dependabot.com/grpc/grpc-go/issues/4521\">#4521</a>)</li>\n<li><a href=\"https://github.com/grpc/grpc-go/commit/45549242f79aacb850de77336a76777bef8bbe01\"><code>4554924</code></a> internal: fix deadlock during switch_balancer and NewSubConn() (<a href=\"https://github-redirect.dependabot.com/grpc/grpc-go/issues/4536\">#4536</a>)</li>\n<li><a href=\"https://github.com/grpc/grpc-go/commit/2d3b1f900edcb0f08915526e01adb17d1c829180\"><code>2d3b1f9</code></a> grpc: prevent deadlock in Test/ClientUpdatesParamsAfterGoAway on failure (<a href=\"https://github-redirect.dependabot.com/grpc/grpc-go/issues/4534\">#4534</a>)</li>\n<li><a href=\"https://github.com/grpc/grpc-go/commit/6351a55c3895e5658b2c59769c81109d962d0e04\"><code>6351a55</code></a> xds: remove env var protetion of advanced routing features (<a href=\"https://github-redirect.dependabot.com/grpc/grpc-go/issues/4529\">#4529</a>)</li>\n<li><a href=\"https://github.com/grpc/grpc-go/commit/95e48a892d6c51e95d2aa77742da72c2df14dc28\"><code>95e48a8</code></a> Add GetServiceInfo to xds.GRPCServer (<a href=\"https://github-redirect.dependabot.com/grpc/grpc-go/issues/4507\">#4507</a>)</li>\n<li><a href=\"https://github.com/grpc/grpc-go/commit/aa1169ab7c3b34a8ed665b16ce9cfc5343306807\"><code>aa1169a</code></a> vet: remove support for non-module-aware Go versions (<a href=\"https://github-redirect.dependabot.com/grpc/grpc-go/issues/4530\">#4530</a>)</li>\n<li><a href=\"https://github.com/grpc/grpc-go/commit/b1418a6e74bc6bed7dad82588b6d817b5417b20b\"><code>b1418a6</code></a> xds: export XDSClient interface and use it in balancer tests (<a href=\"https://github-redirect.dependabot.com/grpc/grpc-go/issues/4510\">#4510</a>)</li>\n<li><a href=\"https://github.com/grpc/grpc-go/commit/7301a311748ce82f30d8bd8076fad23ec4c7c1df\"><code>7301a31</code></a> c2p: add random number to xDS node ID in google-c2p resolver (<a href=\"https://github-redirect.dependabot.com/grpc/grpc-go/issues/4519\">#4519</a>)</li>\n<li>Additional commits viewable in <a href=\"https://github.com/grpc/grpc-go/compare/v1.20.1...v1.39.0\">compare view</a></li>\n</ul>\n</details>\n<br />\n\n\n[![Dependabot compatibility score](https://api.dependabot.com/badges/compatibility_score?dependency-name=google.golang.org/grpc&package-manager=dep&previous-version=1.20.1&new-version=1.39.0)](https://dependabot.com/compatibility-score/?dependency-name=google.golang.org/grpc&package-manager=dep&previous-version=1.20.1&new-version=1.39.0)\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n<details>\n<summary>Dependabot commands and options</summary>\n<br />\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot merge` will merge this PR after your CI passes on it\n- `@dependabot squash and merge` will squash and merge this PR after your CI passes on it\n- `@dependabot cancel merge` will cancel a previously requested merge and block automerging\n- `@dependabot reopen` will reopen this PR if it is closed\n- `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually\n- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot use these labels` will set the current labels as the default for future PRs for this repo and language\n- `@dependabot use these reviewers` will set the current reviewers as the default for future PRs for this repo and language\n- `@dependabot use these assignees` will set the current assignees as the default for future PRs for this repo and language\n- `@dependabot use this milestone` will set the current milestone as the default for future PRs for this repo and language\n- `@dependabot badge me` will comment on this PR with code to add a \"Dependabot enabled\" badge to your readme\n\nAdditionally, you can set the following in your Dependabot [dashboard](https://app.dependabot.com):\n- Update frequency (including time of day and day of week)\n- Pull request limits (per update run and/or open at any time)\n- Automerge options (never/patch/minor, and dev/runtime dependencies)\n- Out-of-range updates (receive only lockfile updates, if desired)\n- Security updates (receive only security updates, if desired)\n\n\n\n</details>","created_at":"2021-07-01T04:56:11Z","updated_at":"2021-07-01T04:56:12Z","closed_at":null,"merged_at":null,"merge_commit_sha":"9e7a198b43bd2765d325c816671bb14b183d2136","assignees":[],"requested_reviewers":[],"requested_teams":[],"labels":[{"id":1224325914,"node_id":"MDU6TGFiZWwxMjI0MzI1OTE0","url":"https://api.github.com/repos/src-d/lookout/labels/dependencies","name":"dependencies","color":"0025ff","default":false,"description":"Pull requests that update a dependency file"},{"id":1225436017,"node_id":"MDU6TGFiZWwxMjI1NDM2MDE3","url":"https://api.github.com/repos/src-d/lookout/labels/go","name":"go","color":"16e2e2","default":false,"description":"Pull requests that update Go code"}],"milestone":null,"draft":false,"commits_url":"https://api.github.com/repos/src-d/lookout/pulls/826/commits","review_comments_url":"https://api.github.com/repos/src-d/lookout/pulls/826/comments","review_comment_url":"https://api.github.com/repos/src-d/lookout/pulls/comments{/number}","comments_url":"https://api.github.com/repos/src-d/lookout/issues/826/comments","statuses_url":"https://api.github.com/repos/src-d/lookout/statuses/e905eec8702ad1aa5e64908bafe1bad793bc3338","head":{"label":"src-d:dependabot/dep/google.golang.org/grpc-1.39.0","ref":"dependabot/dep/google.golang.org/grpc-1.39.0","sha":"e905eec8702ad1aa5e64908bafe1bad793bc3338","user":{"login":"src-d","id":15128793,"node_id":"MDEyOk9yZ2FuaXphdGlvbjE1MTI4Nzkz","avatar_url":"https://avatars.githubusercontent.com/u/15128793?v=4","gravatar_id":"","url":"https://api.github.com/users/src-d","html_url":"https://github.com/src-d","followers_url":"https://api.github.com/users/src-d/followers","following_url":"https://api.github.com/users/src-d/following{/other_user}","gists_url":"https://api.github.com/users/src-d/gists{/gist_id}","starred_url":"https://api.github.com/users/src-d/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/src-d/subscriptions","organizations_url":"https://api.github.com/users/src-d/orgs","repos_url":"https://api.github.com/users/src-d/repos","events_url":"https://api.github.com/users/src-d/events{/privacy}","received_events_url":"https://api.github.com/users/src-d/received_events","type":"Organization","user_view_type":"public","site_admin":false},"repo":{"id":136146572,"node_id":"MDEwOlJlcG9zaXRvcnkxMzYxNDY1NzI=","name":"lookout","full_name":"src-d/lookout","private":false,"owner":{"login":"src-d","id":15128793,"node_id":"MDEyOk9yZ2FuaXphdGlvbjE1MTI4Nzkz","avatar_url":"https://avatars.githubusercontent.com/u/15128793?v=4","gravatar_id":"","url":"https://api.github.com/users/src-d","html_url":"https://github.com/src-d","followers_url":"https://api.github.com/users/src-d/followers","following_url":"https://api.github.com/users/src-d/following{/other_user}","gists_url":"https://api.github.com/users/src-d/gists{/gist_id}","starred_url":"https://api.github.com/users/src-d/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/src-d/subscriptions","organizations_url":"https://api.github.com/users/src-d/orgs","repos_url":"https://api.github.com/users/src-d/repos","events_url":"https://api.github.com/users/src-d/events{/privacy}","received_events_url":"https://api.github.com/users/src-d/received_events","type":"Organization","user_view_type":"public","site_admin":false},"html_url":"https://github.com/src-d/lookout","description":"Assisted code review, running custom code analyzers on pull requests","fork":false,"url":"https://api.github.com/repos/src-d/lookout","forks_url":"https://api.github.com/repos/src-d/lookout/forks","keys_url":"https://api.github.com/repos/src-d/lookout/keys{/key_id}","collaborators_url":"https://api.github.com/repos/src-d/lookout/collaborators{/collaborator}","teams_url":"https://api.github.com/repos/src-d/lookout/teams","hooks_url":"https://api.github.com/repos/src-d/lookout/hooks","issue_events_url":"https://api.github.com/repos/src-d/lookout/issues/events{/number}","events_url":"https://api.github.com/repos/src-d/lookout/events","assignees_url":"https://api.github.com/repos/src-d/lookout/assignees{/user}","branches_url":"https://api.github.com/repos/src-d/lookout/branches{/branch}","tags_url":"https://api.github.com/repos/src-d/lookout/tags","blobs_url":"https://api.github.com/repos/src-d/lookout/git/blobs{/sha}","git_tags_url":"https://api.github.com/repos/src-d/lookout/git/tags{/sha}","git_refs_url":"https://api.github.com/repos/src-d/lookout/git/refs{/sha}","trees_url":"https://api.github.com/repos/src-d/lookout/git/trees{/sha}","statuses_url":"https://api.github.com/repos/src-d/lookout/statuses/{sha}","languages_url":"https://api.github.com/repos/src-d/lookout/languages","stargazers_url":"https://api.github.com/repos/src-d/lookout/stargazers","contributors_url":"https://api.github.com/repos/src-d/lookout/contributors","subscribers_url":"https://api.github.com/repos/src-d/lookout/subscribers","subscription_url":"https://api.github.com/repos/src-d/lookout/subscription","commits_url":"https://api.github.com/repos/src-d/lookout/commits{/sha}","git_commits_url":"https://api.github.com/repos/src-d/lookout/git/commits{/sha}","comments_url":"https://api.github.com/repos/src-d/lookout/comments{/number}","issue_comment_url":"https://api.github.com/repos/src-d/lookout/issues/comments{/number}","contents_url":"https://api.github.com/repos/src-d/lookout/contents/{+path}","compare_url":"https://api.github.com/repos/src-d/lookout/compare/{base}...{head}","merges_url":"https://api.github.com/repos/src-d/lookout/merges","archive_url":"https://api.github.com/repos/src-d/lookout/{archive_format}{/ref}","downloads_url":"https://api.github.com/repos/src-d/lookout/downloads","issues_url":"https://api.github.com/repos/src-d/lookout/issues{/number}","pulls_url":"https://api.github.com/repos/src-d/lookout/pulls{/number}","milestones_url":"https://api.github.com/repos/src-d/lookout/milestones{/number}","notifications_url":"https://api.github.com/repos/src-d/lookout/notifications{?since,all,participating}","labels_url":"https://api.github.com/repos/src-d/lookout/labels{/name}","releases_url":"https://api.github.com/repos/src-d/lookout/releases{/id}","deployments_url":"https://api.github.com/repos/src-d/lookout/deployments","created_at":"2018-06-05T08:37:23Z","updated_at":"2025-10-05T17:39:33Z","pushed_at":"2021-08-03T19:18:36Z","git_url":"git://github.com/src-d/lookout.git","ssh_url":"git@github.com:src-d/lookout.git","clone_url":"https://github.com/src-d/lookout.git","svn_url":"https://github.com/src-d/lookout","homepage":"https://docs.sourced.tech/lookout","size":60130,"stargazers_count":152,"watchers_count":152,"language":"Go","has_issues":true,"has_projects":false,"has_downloads":true,"has_wiki":false,"has_pages":false,"has_discussions":false,"forks_count":33,"mirror_url":null,"archived":false,"disabled":false,"open_issues_count":84,"license":{"key":"agpl-3.0","name":"GNU Affero General Public License v3.0","spdx_id":"AGPL-3.0","url":"https://api.github.com/licenses/agpl-3.0","node_id":"MDc6TGljZW5zZTE="},"allow_forking":true,"is_template":false,"web_commit_signoff_required":false,"has_pull_requests":true,"pull_request_creation_policy":"all","topics":["code-review","github","lookout"],"visibility":"public","forks":33,"open_issues":84,"watchers":152,"default_branch":"master"}},"base":{"label":"src-d:master","ref":"master","sha":"d5cccd9aed531327965c374533f42e0469af4cda","user":{"login":"src-d","id":15128793,"node_id":"MDEyOk9yZ2FuaXphdGlvbjE1MTI4Nzkz","avatar_url":"https://avatars.githubusercontent.com/u/15128793?v=4","gravatar_id":"","url":"https://api.github.com/users/src-d","html_url":"https://github.com/src-d","followers_url":"https://api.github.com/users/src-d/followers","following_url":"https://api.github.com/users/src-d/following{/other_user}","gists_url":"https://api.github.com/users/src-d/gists{/gist_id}","starred_url":"https://api.github.com/users/src-d/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/src-d/subscriptions","organizations_url":"https://api.github.com/users/src-d/orgs","repos_url":"https://api.github.com/users/src-d/repos","events_url":"https://api.github.com/users/src-d/events{/privacy}","received_events_url":"https://api.github.com/users/src-d/received_events","type":"Organization","user_view_type":"public","site_admin":false},"repo":{"id":136146572,"node_id":"MDEwOlJlcG9zaXRvcnkxMzYxNDY1NzI=","name":"lookout","full_name":"src-d/lookout","private":false,"owner":{"login":"src-d","id":15128793,"node_id":"MDEyOk9yZ2FuaXphdGlvbjE1MTI4Nzkz","avatar_url":"https://avatars.githubusercontent.com/u/15128793?v=4","gravatar_id":"","url":"https://api.github.com/users/src-d","html_url":"https://github.com/src-d","followers_url":"https://api.github.com/users/src-d/followers","following_url":"https://api.github.com/users/src-d/following{/other_user}","gists_url":"https://api.github.com/users/src-d/gists{/gist_id}","starred_url":"https://api.github.com/users/src-d/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/src-d/subscriptions","organizations_url":"https://api.github.com/users/src-d/orgs","repos_url":"https://api.github.com/users/src-d/repos","events_url":"https://api.github.com/users/src-d/events{/privacy}","received_events_url":"https://api.github.com/users/src-d/received_events","type":"Organization","user_view_type":"public","site_admin":false},"html_url":"https://github.com/src-d/lookout","description":"Assisted code review, running custom code analyzers on pull requests","fork":false,"url":"https://api.github.com/repos/src-d/lookout","forks_url":"https://api.github.com/repos/src-d/lookout/forks","keys_url":"https://api.github.com/repos/src-d/lookout/keys{/key_id}","collaborators_url":"https://api.github.com/repos/src-d/lookout/collaborators{/collaborator}","teams_url":"https://api.github.com/repos/src-d/lookout/teams","hooks_url":"https://api.github.com/repos/src-d/lookout/hooks","issue_events_url":"https://api.github.com/repos/src-d/lookout/issues/events{/number}","events_url":"https://api.github.com/repos/src-d/lookout/events","assignees_url":"https://api.github.com/repos/src-d/lookout/assignees{/user}","branches_url":"https://api.github.com/repos/src-d/lookout/branches{/branch}","tags_url":"https://api.github.com/repos/src-d/lookout/tags","blobs_url":"https://api.github.com/repos/src-d/lookout/git/blobs{/sha}","git_tags_url":"https://api.github.com/repos/src-d/lookout/git/tags{/sha}","git_refs_url":"https://api.github.com/repos/src-d/lookout/git/refs{/sha}","trees_url":"https://api.github.com/repos/src-d/lookout/git/trees{/sha}","statuses_url":"https://api.github.com/repos/src-d/lookout/statuses/{sha}","languages_url":"https://api.github.com/repos/src-d/lookout/languages","stargazers_url":"https://api.github.com/repos/src-d/lookout/stargazers","contributors_url":"https://api.github.com/repos/src-d/lookout/contributors","subscribers_url":"https://api.github.com/repos/src-d/lookout/subscribers","subscription_url":"https://api.github.com/repos/src-d/lookout/subscription","commits_url":"https://api.github.com/repos/src-d/lookout/commits{/sha}","git_commits_url":"https://api.github.com/repos/src-d/lookout/git/commits{/sha}","comments_url":"https://api.github.com/repos/src-d/lookout/comments{/number}","issue_comment_url":"https://api.github.com/repos/src-d/lookout/issues/comments{/number}","contents_url":"https://api.github.com/repos/src-d/lookout/contents/{+path}","compare_url":"https://api.github.com/repos/src-d/lookout/compare/{base}...{head}","merges_url":"https://api.github.com/repos/src-d/lookout/merges","archive_url":"https://api.github.com/repos/src-d/lookout/{archive_format}{/ref}","downloads_url":"https://api.github.com/repos/src-d/lookout/downloads","issues_url":"https://api.github.com/repos/src-d/lookout/issues{/number}","pulls_url":"https://api.github.com/repos/src-d/lookout/pulls{/number}","milestones_url":"https://api.github.com/repos/src-d/lookout/milestones{/number}","notifications_url":"https://api.github.com/repos/src-d/lookout/notifications{?since,all,participating}","labels_url":"https://api.github.com/repos/src-d/lookout/labels{/name}","releases_url":"https://api.github.com/repos/src-d/lookout/releases{/id}","deployments_url":"https://api.github.com/repos/src-d/lookout/deployments","created_at":"2018-06-05T08:37:23Z","updated_at":"2025-10-05T17:39:33Z","pushed_at":"2021-08-03T19:18:36Z","git_url":"git://github.com/src-d/lookout.git","ssh_url":"git@github.com:src-d/lookout.git","clone_url":"https://github.com/src-d/lookout.git","svn_url":"https://github.com/src-d/lookout","homepage":"https://docs.sourced.tech/lookout","size":60130,"stargazers_count":152,"watchers_count":152,"language":"Go","has_issues":true,"has_projects":false,"has_downloads":true,"has_wiki":false,"has_pages":false,"has_discussions":false,"forks_count":33,"mirror_url":null,"archived":false,"disabled":false,"open_issues_count":84,"license":{"key":"agpl-3.0","name":"GNU Affero General Public License v3.0","spdx_id":"AGPL-3.0","url":"https://api.github.com/licenses/agpl-3.0","node_id":"MDc6TGljZW5zZTE="},"allow_forking":true,"is_template":false,"web_commit_signoff_required":false,"has_pull_requests":true,"pull_request_creation_policy":"all","topics":["code-review","github","lookout"],"visibility":"public","forks":33,"open_issues":84,"watchers":152,"default_branch":"master"}},"_links":{"self":{"href":"https://api.github.com/repos/src-d/lookout/pulls/826"},"html":{"href":"https://github.com/src-d/lookout/pull/826"},"issue":{"href":"https://api.github.com/repos/src-d/lookout/issues/826"},"comments":{"href":"https://api.github.com/repos/src-d/lookout/issues/826/comments"},"review_comments":{"href":"https://api.github.com/repos/src-d/lookout/pulls/826/comments"},"review_comment":{"href":"https://api.github.com/repos/src-d/lookout/pulls/comments{/number}"},"commits":{"href":"https://api.github.com/repos/src-d/lookout/pulls/826/commits"},"statuses":{"href":"https://api.github.com/repos/src-d/lookout/statuses/e905eec8702ad1aa5e64908bafe1bad793bc3338"}},"author_association":"NONE","auto_merge":null,"assignee":null,"active_lock_reason":null},{"url":"https://api.github.com/repos/src-d/lookout/pulls/822","id":658660475,"node_id":"MDExOlB1bGxSZXF1ZXN0NjU4NjYwNDc1","html_url":"https://github.com/src-d/lookout/pull/822","diff_url":"https://github.com/src-d/lookout/pull/822.diff","patch_url":"https://github.com/src-d/lookout/pull/822.patch","issue_url":"https://api.github.com/repos/src-d/lookout/issues/822","number":822,"state":"open","locked":false,"title":"[Security] Bump js-yaml from 3.12.1 to 3.14.1 in /frontend","user":{"login":"dependabot-preview[bot]","id":27856297,"node_id":"MDM6Qm90Mjc4NTYyOTc=","avatar_url":"https://avatars.githubusercontent.com/in/2141?v=4","gravatar_id":"","url":"https://api.github.com/users/dependabot-preview%5Bbot%5D","html_url":"https://github.com/apps/dependabot-preview","followers_url":"https://api.github.com/users/dependabot-preview%5Bbot%5D/followers","following_url":"https://api.github.com/users/dependabot-preview%5Bbot%5D/following{/other_user}","gists_url":"https://api.github.com/users/dependabot-preview%5Bbot%5D/gists{/gist_id}","starred_url":"https://api.github.com/users/dependabot-preview%5Bbot%5D/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/dependabot-preview%5Bbot%5D/subscriptions","organizations_url":"https://api.github.com/users/dependabot-preview%5Bbot%5D/orgs","repos_url":"https://api.github.com/users/dependabot-preview%5Bbot%5D/repos","events_url":"https://api.github.com/users/dependabot-preview%5Bbot%5D/events{/privacy}","received_events_url":"https://api.github.com/users/dependabot-preview%5Bbot%5D/received_events","type":"Bot","user_view_type":"public","site_admin":false},"body":"Bumps [js-yaml](https://github.com/nodeca/js-yaml) from 3.12.1 to 3.14.1. **This update includes security fixes.**\n<details>\n<summary>Vulnerabilities fixed</summary>\n<p><em>Sourced from <a href=\"https://github.com/advisories/GHSA-2pr6-76vf-7546\">The GitHub Security Advisory Database</a>.</em></p>\n<blockquote>\n<p><strong>Denial of Service in js-yaml</strong>\nVersions of <code>js-yaml</code> prior to 3.13.0 are vulnerable to Denial of Service. By parsing a carefully-crafted YAML file, the node process stalls and may exhaust system resources leading to a Denial of Service.</p>\n<h2>Recommendation</h2>\n<p>Upgrade to version 3.13.0.</p>\n<p>Affected versions: &lt; 3.13.0</p>\n</blockquote>\n<p><em>Sourced from <a href=\"https://github.com/advisories/GHSA-8j8c-7jfh-h6hx\">The GitHub Security Advisory Database</a>.</em></p>\n<blockquote>\n<p><strong>Code Injection in js-yaml</strong>\nVersions of <code>js-yaml</code> prior to 3.13.1 are vulnerable to Code Injection. The <code>load()</code> function may execute arbitrary code injected through a malicious YAML file. Objects that have <code>toString</code> as key, JavaScript code as value and are used as explicit mapping keys allow attackers to execute the supplied code through the <code>load()</code> function. The <code>safeLoad()</code> function is unaffected.</p>\n<p>An example payload is\n<code>{ toString: ! 'function (){return Date.now()}' } : 1</code>\nwhich returns the object\n{\n&quot;1553107949161&quot;: 1\n}</p>\n<h2>Recommendation</h2>\n<p>Upgrade to version 3.13.1.</p>\n<p>Affected versions: &lt; 3.13.1</p>\n</blockquote>\n</details>\n<details>\n<summary>Changelog</summary>\n<p><em>Sourced from <a href=\"https://github.com/nodeca/js-yaml/blob/master/CHANGELOG.md\">js-yaml's changelog</a>.</em></p>\n<blockquote>\n<h2>[3.14.1] - 2020-12-07</h2>\n<h3>Security</h3>\n<ul>\n<li>Fix possible code execution in (already unsafe) <code>.load()</code> (in &amp;anchor).</li>\n</ul>\n<h2>[3.14.0] - 2020-05-22</h2>\n<h3>Changed</h3>\n<ul>\n<li>Support <code>safe/loadAll(input, options)</code> variant of call.</li>\n<li>CI: drop outdated nodejs versions.</li>\n<li>Dev deps bump.</li>\n</ul>\n<h3>Fixed</h3>\n<ul>\n<li>Quote <code>=</code> in plain scalars <a href=\"https://github-redirect.dependabot.com/nodeca/js-yaml/issues/519\">#519</a>.</li>\n<li>Check the node type for <code>!&lt;?&gt;</code> tag in case user manually specifies it.</li>\n<li>Verify that there are no null-bytes in input.</li>\n<li>Fix wrong quote position when writing condensed flow, <a href=\"https://github-redirect.dependabot.com/nodeca/js-yaml/issues/526\">#526</a>.</li>\n</ul>\n<h2>[3.13.1] - 2019-04-05</h2>\n<h3>Security</h3>\n<ul>\n<li>Fix possible code execution in (already unsafe) <code>.load()</code>, <a href=\"https://github-redirect.dependabot.com/nodeca/js-yaml/issues/480\">#480</a>.</li>\n</ul>\n<h2>[3.13.0] - 2019-03-20</h2>\n<h3>Security</h3>\n<ul>\n<li>Security fix: <code>safeLoad()</code> can hang when arrays with nested refs\nused as key. Now throws exception for nested arrays. <a href=\"https://github-redirect.dependabot.com/nodeca/js-yaml/issues/475\">#475</a>.</li>\n</ul>\n<h2>[3.12.2] - 2019-02-26</h2>\n<h3>Fixed</h3>\n<ul>\n<li>Fix <code>noArrayIndent</code> option for root level, <a href=\"https://github-redirect.dependabot.com/nodeca/js-yaml/issues/468\">#468</a>.</li>\n</ul>\n</blockquote>\n</details>\n<details>\n<summary>Commits</summary>\n<ul>\n<li><a href=\"https://github.com/nodeca/js-yaml/commit/37caaad57dc37d350d9a4577a5da53f482bb2983\"><code>37caaad</code></a> 3.14.1 released</li>\n<li><a href=\"https://github.com/nodeca/js-yaml/commit/094c0f7a79e6ff9e2b4d50b22686d2586894b58f\"><code>094c0f7</code></a> dist rebuild</li>\n<li><a href=\"https://github.com/nodeca/js-yaml/commit/9586ebe23298427d26b3479979bd6499bf3a14c2\"><code>9586ebe</code></a> Avoid calling hasOwnProperty of user-controlled objects</li>\n<li><a href=\"https://github.com/nodeca/js-yaml/commit/34e5072f43fd36b08aaaad433da73c10d47c41e5\"><code>34e5072</code></a> 3.14.0 released</li>\n<li><a href=\"https://github.com/nodeca/js-yaml/commit/7b25c83a6dc77097c2bf14bf714e168f60ee199b\"><code>7b25c83</code></a> Browser files rebuild</li>\n<li><a href=\"https://github.com/nodeca/js-yaml/commit/6f7347396867b8dcfc042722c2aae810dfe4caae\"><code>6f73473</code></a> Dev deps bump</li>\n<li><a href=\"https://github.com/nodeca/js-yaml/commit/0c293491d903cddcd41b41c165bc45eeb9a8d720\"><code>0c29349</code></a> Travis-CI: drop old nodejs versions</li>\n<li><a href=\"https://github.com/nodeca/js-yaml/commit/10be97ebbd588e68907e6c67e0b3843a4caab475\"><code>10be97e</code></a> fix(loader): Add support for <code>safe/loadAll(input, options)</code></li>\n<li><a href=\"https://github.com/nodeca/js-yaml/commit/d6983dd4291849b2854e8d26e1beb302edfd4c76\"><code>d6983dd</code></a> Fix issue <a href=\"https://github-redirect.dependabot.com/nodeca/js-yaml/issues/526\">#526</a>: wrong quote position writing condensed flow (<a href=\"https://github-redirect.dependabot.com/nodeca/js-yaml/issues/527\">#527</a>)</li>\n<li><a href=\"https://github.com/nodeca/js-yaml/commit/93fbf7d4ddecea60709c8379397247af28f11e10\"><code>93fbf7d</code></a> fix issue 526 (wrong quote position writing condensed flow)</li>\n<li>Additional commits viewable in <a href=\"https://github.com/nodeca/js-yaml/compare/3.12.1...3.14.1\">compare view</a></li>\n</ul>\n</details>\n<br />\n\n\n[![Dependabot compatibility score](https://api.dependabot.com/badges/compatibility_score?dependency-name=js-yaml&package-manager=npm_and_yarn&previous-version=3.12.1&new-version=3.14.1)](https://dependabot.com/compatibility-score/?dependency-name=js-yaml&package-manager=npm_and_yarn&previous-version=3.12.1&new-version=3.14.1)\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n<details>\n<summary>Dependabot commands and options</summary>\n<br />\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot merge` will merge this PR after your CI passes on it\n- `@dependabot squash and merge` will squash and merge this PR after your CI passes on it\n- `@dependabot cancel merge` will cancel a previously requested merge and block automerging\n- `@dependabot reopen` will reopen this PR if it is closed\n- `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually\n- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot use these labels` will set the current labels as the default for future PRs for this repo and language\n- `@dependabot use these reviewers` will set the current reviewers as the default for future PRs for this repo and language\n- `@dependabot use these assignees` will set the current assignees as the default for future PRs for this repo and language\n- `@dependabot use this milestone` will set the current milestone as the default for future PRs for this repo and language\n- `@dependabot badge me` will comment on this PR with code to add a \"Dependabot enabled\" badge to your readme\n\nAdditionally, you can set the following in your Dependabot [dashboard](https://app.dependabot.com):\n- Update frequency (including time of day and day of week)\n- Pull request limits (per update run and/or open at any time)\n- Automerge options (never/patch/minor, and dev/runtime dependencies)\n- Out-of-range updates (receive only lockfile updates, if desired)\n- Security updates (receive only security updates, if desired)\n\n\n\n</details>","created_at":"2021-06-01T05:21:57Z","updated_at":"2021-06-01T05:21:59Z","closed_at":null,"merged_at":null,"merge_commit_sha":"8ffa018bb2c1f62cad9219a6694c5280e9075fce","assignees":[],"requested_reviewers":[],"requested_teams":[],"labels":[{"id":1224325914,"node_id":"MDU6TGFiZWwxMjI0MzI1OTE0","url":"https://api.github.com/repos/src-d/lookout/labels/dependencies","name":"dependencies","color":"0025ff","default":false,"description":"Pull requests that update a dependency file"},{"id":1225416698,"node_id":"MDU6TGFiZWwxMjI1NDE2Njk4","url":"https://api.github.com/repos/src-d/lookout/labels/javascript","name":"javascript","color":"168700","default":false,"description":"Pull requests that update Javascript code"},{"id":1445656551,"node_id":"MDU6TGFiZWwxNDQ1NjU2NTUx","url":"https://api.github.com/repos/src-d/lookout/labels/security","name":"security","color":"ee0701","default":false,"description":"Pull requests that address a security vulnerability"}],"milestone":null,"draft":false,"commits_url":"https://api.github.com/repos/src-d/lookout/pulls/822/commits","review_comments_url":"https://api.github.com/repos/src-d/lookout/pulls/822/comments","review_comment_url":"https://api.github.com/repos/src-d/lookout/pulls/comments{/number}","comments_url":"https://api.github.com/repos/src-d/lookout/issues/822/comments","statuses_url":"https://api.github.com/repos/src-d/lookout/statuses/53fdc8778451745a0a0af0c776d4a9c2562c4cb9","head":{"label":"src-d:dependabot/npm_and_yarn/frontend/js-yaml-3.14.1","ref":"dependabot/npm_and_yarn/frontend/js-yaml-3.14.1","sha":"53fdc8778451745a0a0af0c776d4a9c2562c4cb9","user":{"login":"src-d","id":15128793,"node_id":"MDEyOk9yZ2FuaXphdGlvbjE1MTI4Nzkz","avatar_url":"https://avatars.githubusercontent.com/u/15128793?v=4","gravatar_id":"","url":"https://api.github.com/users/src-d","html_url":"https://github.com/src-d","followers_url":"https://api.github.com/users/src-d/followers","following_url":"https://api.github.com/users/src-d/following{/other_user}","gists_url":"https://api.github.com/users/src-d/gists{/gist_id}","starred_url":"https://api.github.com/users/src-d/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/src-d/subscriptions","organizations_url":"https://api.github.com/users/src-d/orgs","repos_url":"https://api.github.com/users/src-d/repos","events_url":"https://api.github.com/users/src-d/events{/privacy}","received_events_url":"https://api.github.com/users/src-d/received_events","type":"Organization","user_view_type":"public","site_admin":false},"repo":{"id":136146572,"node_id":"MDEwOlJlcG9zaXRvcnkxMzYxNDY1NzI=","name":"lookout","full_name":"src-d/lookout","private":false,"owner":{"login":"src-d","id":15128793,"node_id":"MDEyOk9yZ2FuaXphdGlvbjE1MTI4Nzkz","avatar_url":"https://avatars.githubusercontent.com/u/15128793?v=4","gravatar_id":"","url":"https://api.github.com/users/src-d","html_url":"https://github.com/src-d","followers_url":"https://api.github.com/users/src-d/followers","following_url":"https://api.github.com/users/src-d/following{/other_user}","gists_url":"https://api.github.com/users/src-d/gists{/gist_id}","starred_url":"https://api.github.com/users/src-d/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/src-d/subscriptions","organizations_url":"https://api.github.com/users/src-d/orgs","repos_url":"https://api.github.com/users/src-d/repos","events_url":"https://api.github.com/users/src-d/events{/privacy}","received_events_url":"https://api.github.com/users/src-d/received_events","type":"Organization","user_view_type":"public","site_admin":false},"html_url":"https://github.com/src-d/lookout","description":"Assisted code review, running custom code analyzers on pull requests","fork":false,"url":"https://api.github.com/repos/src-d/lookout","forks_url":"https://api.github.com/repos/src-d/lookout/forks","keys_url":"https://api.github.com/repos/src-d/lookout/keys{/key_id}","collaborators_url":"https://api.github.com/repos/src-d/lookout/collaborators{/collaborator}","teams_url":"https://api.github.com/repos/src-d/lookout/teams","hooks_url":"https://api.github.com/repos/src-d/lookout/hooks","issue_events_url":"https://api.github.com/repos/src-d/lookout/issues/events{/number}","events_url":"https://api.github.com/repos/src-d/lookout/events","assignees_url":"https://api.github.com/repos/src-d/lookout/assignees{/user}","branches_url":"https://api.github.com/repos/src-d/lookout/branches{/branch}","tags_url":"https://api.github.com/repos/src-d/lookout/tags","blobs_url":"https://api.github.com/repos/src-d/lookout/git/blobs{/sha}","git_tags_url":"https://api.github.com/repos/src-d/lookout/git/tags{/sha}","git_refs_url":"https://api.github.com/repos/src-d/lookout/git/refs{/sha}","trees_url":"https://api.github.com/repos/src-d/lookout/git/trees{/sha}","statuses_url":"https://api.github.com/repos/src-d/lookout/statuses/{sha}","languages_url":"https://api.github.com/repos/src-d/lookout/languages","stargazers_url":"https://api.github.com/repos/src-d/lookout/stargazers","contributors_url":"https://api.github.com/repos/src-d/lookout/contributors","subscribers_url":"https://api.github.com/repos/src-d/lookout/subscribers","subscription_url":"https://api.github.com/repos/src-d/lookout/subscription","commits_url":"https://api.github.com/repos/src-d/lookout/commits{/sha}","git_commits_url":"https://api.github.com/repos/src-d/lookout/git/commits{/sha}","comments_url":"https://api.github.com/repos/src-d/lookout/comments{/number}","issue_comment_url":"https://api.github.com/repos/src-d/lookout/issues/comments{/number}","contents_url":"https://api.github.com/repos/src-d/lookout/contents/{+path}","compare_url":"https://api.github.com/repos/src-d/lookout/compare/{base}...{head}","merges_url":"https://api.github.com/repos/src-d/lookout/merges","archive_url":"https://api.github.com/repos/src-d/lookout/{archive_format}{/ref}","downloads_url":"https://api.github.com/repos/src-d/lookout/downloads","issues_url":"https://api.github.com/repos/src-d/lookout/issues{/number}","pulls_url":"https://api.github.com/repos/src-d/lookout/pulls{/number}","milestones_url":"https://api.github.com/repos/src-d/lookout/milestones{/number}","notifications_url":"https://api.github.com/repos/src-d/lookout/notifications{?since,all,participating}","labels_url":"https://api.github.com/repos/src-d/lookout/labels{/name}","releases_url":"https://api.github.com/repos/src-d/lookout/releases{/id}","deployments_url":"https://api.github.com/repos/src-d/lookout/deployments","created_at":"2018-06-05T08:37:23Z","updated_at":"2025-10-05T17:39:33Z","pushed_at":"2021-08-03T19:18:36Z","git_url":"git://github.com/src-d/lookout.git","ssh_url":"git@github.com:src-d/lookout.git","clone_url":"https://github.com/src-d/lookout.git","svn_url":"https://github.com/src-d/lookout","homepage":"https://docs.sourced.tech/lookout","size":60130,"stargazers_count":152,"watchers_count":152,"language":"Go","has_issues":true,"has_projects":false,"has_downloads":true,"has_wiki":false,"has_pages":false,"has_discussions":false,"forks_count":33,"mirror_url":null,"archived":false,"disabled":false,"open_issues_count":84,"license":{"key":"agpl-3.0","name":"GNU Affero General Public License v3.0","spdx_id":"AGPL-3.0","url":"https://api.github.com/licenses/agpl-3.0","node_id":"MDc6TGljZW5zZTE="},"allow_forking":true,"is_template":false,"web_commit_signoff_required":false,"has_pull_requests":true,"pull_request_creation_policy":"all","topics":["code-review","github","lookout"],"visibility":"public","forks":33,"open_issues":84,"watchers":152,"default_branch":"master"}},"base":{"label":"src-d:master","ref":"master","sha":"d5cccd9aed531327965c374533f42e0469af4cda","user":{"login":"src-d","id":15128793,"node_id":"MDEyOk9yZ2FuaXphdGlvbjE1MTI4Nzkz","avatar_url":"https://avatars.githubusercontent.com/u/15128793?v=4","gravatar_id":"","url":"https://api.github.com/users/src-d","html_url":"https://github.com/src-d","followers_url":"https://api.github.com/users/src-d/followers","following_url":"https://api.github.com/users/src-d/following{/other_user}","gists_url":"https://api.github.com/users/src-d/gists{/gist_id}","starred_url":"https://api.github.com/users/src-d/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/src-d/subscriptions","organizations_url":"https://api.github.com/users/src-d/orgs","repos_url":"https://api.github.com/users/src-d/repos","events_url":"https://api.github.com/users/src-d/events{/privacy}","received_events_url":"https://api.github.com/users/src-d/received_events","type":"Organization","user_view_type":"public","site_admin":false},"repo":{"id":136146572,"node_id":"MDEwOlJlcG9zaXRvcnkxMzYxNDY1NzI=","name":"lookout","full_name":"src-d/lookout","private":false,"owner":{"login":"src-d","id":15128793,"node_id":"MDEyOk9yZ2FuaXphdGlvbjE1MTI4Nzkz","avatar_url":"https://avatars.githubusercontent.com/u/15128793?v=4","gravatar_id":"","url":"https://api.github.com/users/src-d","html_url":"https://github.com/src-d","followers_url":"https://api.github.com/users/src-d/followers","following_url":"https://api.github.com/users/src-d/following{/other_user}","gists_url":"https://api.github.com/users/src-d/gists{/gist_id}","starred_url":"https://api.github.com/users/src-d/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/src-d/subscriptions","organizations_url":"https://api.github.com/users/src-d/orgs","repos_url":"https://api.github.com/users/src-d/repos","events_url":"https://api.github.com/users/src-d/events{/privacy}","received_events_url":"https://api.github.com/users/src-d/received_events","type":"Organization","user_view_type":"public","site_admin":false},"html_url":"https://github.com/src-d/lookout","description":"Assisted code review, running custom code analyzers on pull requests","fork":false,"url":"https://api.github.com/repos/src-d/lookout","forks_url":"https://api.github.com/repos/src-d/lookout/forks","keys_url":"https://api.github.com/repos/src-d/lookout/keys{/key_id}","collaborators_url":"https://api.github.com/repos/src-d/lookout/collaborators{/collaborator}","teams_url":"https://api.github.com/repos/src-d/lookout/teams","hooks_url":"https://api.github.com/repos/src-d/lookout/hooks","issue_events_url":"https://api.github.com/repos/src-d/lookout/issues/events{/number}","events_url":"https://api.github.com/repos/src-d/lookout/events","assignees_url":"https://api.github.com/repos/src-d/lookout/assignees{/user}","branches_url":"https://api.github.com/repos/src-d/lookout/branches{/branch}","tags_url":"https://api.github.com/repos/src-d/lookout/tags","blobs_url":"https://api.github.com/repos/src-d/lookout/git/blobs{/sha}","git_tags_url":"https://api.github.com/repos/src-d/lookout/git/tags{/sha}","git_refs_url":"https://api.github.com/repos/src-d/lookout/git/refs{/sha}","trees_url":"https://api.github.com/repos/src-d/lookout/git/trees{/sha}","statuses_url":"https://api.github.com/repos/src-d/lookout/statuses/{sha}","languages_url":"https://api.github.com/repos/src-d/lookout/languages","stargazers_url":"https://api.github.com/repos/src-d/lookout/stargazers","contributors_url":"https://api.github.com/repos/src-d/lookout/contributors","subscribers_url":"https://api.github.com/repos/src-d/lookout/subscribers","subscription_url":"https://api.github.com/repos/src-d/lookout/subscription","commits_url":"https://api.github.com/repos/src-d/lookout/commits{/sha}","git_commits_url":"https://api.github.com/repos/src-d/lookout/git/commits{/sha}","comments_url":"https://api.github.com/repos/src-d/lookout/comments{/number}","issue_comment_url":"https://api.github.com/repos/src-d/lookout/issues/comments{/number}","contents_url":"https://api.github.com/repos/src-d/lookout/contents/{+path}","compare_url":"https://api.github.com/repos/src-d/lookout/compare/{base}...{head}","merges_url":"https://api.github.com/repos/src-d/lookout/merges","archive_url":"https://api.github.com/repos/src-d/lookout/{archive_format}{/ref}","downloads_url":"https://api.github.com/repos/src-d/lookout/downloads","issues_url":"https://api.github.com/repos/src-d/lookout/issues{/number}","pulls_url":"https://api.github.com/repos/src-d/lookout/pulls{/number}","milestones_url":"https://api.github.com/repos/src-d/lookout/milestones{/number}","notifications_url":"https://api.github.com/repos/src-d/lookout/notifications{?since,all,participating}","labels_url":"https://api.github.com/repos/src-d/lookout/labels{/name}","releases_url":"https://api.github.com/repos/src-d/lookout/releases{/id}","deployments_url":"https://api.github.com/repos/src-d/lookout/deployments","created_at":"2018-06-05T08:37:23Z","updated_at":"2025-10-05T17:39:33Z","pushed_at":"2021-08-03T19:18:36Z","git_url":"git://github.com/src-d/lookout.git","ssh_url":"git@github.com:src-d/lookout.git","clone_url":"https://github.com/src-d/lookout.git","svn_url":"https://github.com/src-d/lookout","homepage":"https://docs.sourced.tech/lookout","size":60130,"stargazers_count":152,"watchers_count":152,"language":"Go","has_issues":true,"has_projects":false,"has_downloads":true,"has_wiki":false,"has_pages":false,"has_discussions":false,"forks_count":33,"mirror_url":null,"archived":false,"disabled":false,"open_issues_count":84,"license":{"key":"agpl-3.0","name":"GNU Affero General Public License v3.0","spdx_id":"AGPL-3.0","url":"https://api.github.com/licenses/agpl-3.0","node_id":"MDc6TGljZW5zZTE="},"allow_forking":true,"is_template":false,"web_commit_signoff_required":false,"has_pull_requests":true,"pull_request_creation_policy":"all","topics":["code-review","github","lookout"],"visibility":"public","forks":33,"open_issues":84,"watchers":152,"default_branch":"master"}},"_links":{"self":{"href":"https://api.github.com/repos/src-d/lookout/pulls/822"},"html":{"href":"https://github.com/src-d/lookout/pull/822"},"issue":{"href":"https://api.github.com/repos/src-d/lookout/issues/822"},"comments":{"href":"https://api.github.com/repos/src-d/lookout/issues/822/comments"},"review_comments":{"href":"https://api.github.com/repos/src-d/lookout/pulls/822/comments"},"review_comment":{"href":"https://api.github.com/repos/src-d/lookout/pulls/comments{/number}"},"commits":{"href":"https://api.github.com/repos/src-d/lookout/pulls/822/commits"},"statuses":{"href":"https://api.github.com/repos/src-d/lookout/statuses/53fdc8778451745a0a0af0c776d4a9c2562c4cb9"}},"author_association":"NONE","auto_merge":null,"assignee":null,"active_lock_reason":null},{"url":"https://api.github.com/repos/src-d/lookout/pulls/821","id":658645868,"node_id":"MDExOlB1bGxSZXF1ZXN0NjU4NjQ1ODY4","html_url":"https://github.com/src-d/lookout/pull/821","diff_url":"https://github.com/src-d/lookout/pull/821.diff","patch_url":"https://github.com/src-d/lookout/pull/821.patch","issue_url":"https://api.github.com/repos/src-d/lookout/issues/821","number":821,"state":"open","locked":false,"title":"Bump github.com/sanity-io/litter from 09e3a73d5b65eac2f14578aec8fb74ee9b4f1a5e to 1.5.1","user":{"login":"dependabot-preview[bot]","id":27856297,"node_id":"MDM6Qm90Mjc4NTYyOTc=","avatar_url":"https://avatars.githubusercontent.com/in/2141?v=4","gravatar_id":"","url":"https://api.github.com/users/dependabot-preview%5Bbot%5D","html_url":"https://github.com/apps/dependabot-preview","followers_url":"https://api.github.com/users/dependabot-preview%5Bbot%5D/followers","following_url":"https://api.github.com/users/dependabot-preview%5Bbot%5D/following{/other_user}","gists_url":"https://api.github.com/users/dependabot-preview%5Bbot%5D/gists{/gist_id}","starred_url":"https://api.github.com/users/dependabot-preview%5Bbot%5D/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/dependabot-preview%5Bbot%5D/subscriptions","organizations_url":"https://api.github.com/users/dependabot-preview%5Bbot%5D/orgs","repos_url":"https://api.github.com/users/dependabot-preview%5Bbot%5D/repos","events_url":"https://api.github.com/users/dependabot-preview%5Bbot%5D/events{/privacy}","received_events_url":"https://api.github.com/users/dependabot-preview%5Bbot%5D/received_events","type":"Bot","user_view_type":"public","site_admin":false},"body":"Bumps [github.com/sanity-io/litter](https://github.com/sanity-io/litter) from 09e3a73d5b65eac2f14578aec8fb74ee9b4f1a5e to 1.5.1. This release includes the previously tagged commit.\n<details>\n<summary>Changelog</summary>\n<p><em>Sourced from <a href=\"https://github.com/sanity-io/litter/blob/main/CHANGELOG.md\">github.com/sanity-io/litter's changelog</a>.</em></p>\n<blockquote>\n<h1>1.1.0 (2017-11-1)</h1>\n<p>A slight breaking change. The dump-method of the <code>Dumper</code> interface has changed from <code>Dump</code> to <code>LitterDump</code> to mitigate potential collisions.</p>\n<h1>1.0.0 (2017-10-29)</h1>\n<p>Tagged 1.0.0.</p>\n</blockquote>\n</details>\n<details>\n<summary>Commits</summary>\n<ul>\n<li><a href=\"https://github.com/sanity-io/litter/commit/b2cf0ea023a3a7aeb71789deee90fa85182a1510\"><code>b2cf0ea</code></a> Detect nil maps and write them out as TypeName(nil). Fixes <a href=\"https://github-redirect.dependabot.com/sanity-io/litter/issues/2\">#2</a>.</li>\n<li><a href=\"https://github.com/sanity-io/litter/commit/817e27820d816f7f59eaa38985e28d08b7c1c946\"><code>817e278</code></a> Fix regression in pointer naming that would cause pointers to be assigned</li>\n<li><a href=\"https://github.com/sanity-io/litter/commit/454011c60f8bc5fab9def00594507559bf618e28\"><code>454011c</code></a> Fix pointer tracking to include type name when considering pointer</li>\n<li><a href=\"https://github.com/sanity-io/litter/commit/27e9ea81901c904ebe78957a7027a2cb38979277\"><code>27e9ea8</code></a> Fix formatting bug where comma ends up on wrong line. Fixes <a href=\"https://github-redirect.dependabot.com/sanity-io/litter/issues/33\">#33</a>.</li>\n<li><a href=\"https://github.com/sanity-io/litter/commit/7911aef9db06993bba1de99a64922067a92c00cb\"><code>7911aef</code></a> Skip newlines between braces when dumping empty maps.</li>\n<li><a href=\"https://github.com/sanity-io/litter/commit/5a0455f9d427bf4f3f9f4eed809cb46f61b59efc\"><code>5a0455f</code></a> Adds new config option DumpFunc which allows overriding any value's formatting.</li>\n<li><a href=\"https://github.com/sanity-io/litter/commit/6da87dada9b5571b4b57a57ebb2e38d9da9647e5\"><code>6da87da</code></a> Update .travis.yml</li>\n<li><a href=\"https://github.com/sanity-io/litter/commit/9a4d13ca8fb9c21e40caa0e54afdb4e796004ffa\"><code>9a4d13c</code></a> Readme: Document DisablePointerReplacement.</li>\n<li><a href=\"https://github.com/sanity-io/litter/commit/7fa07d55a01003bca61b10c6d6a24d89a7eb6176\"><code>7fa07d5</code></a> Travis: Use Go 1.14.</li>\n<li><a href=\"https://github.com/sanity-io/litter/commit/ce3d236018203644a18b8cb8c26c997e11014bb1\"><code>ce3d236</code></a> go.mod: Go 1.14.</li>\n<li>Additional commits viewable in <a href=\"https://github.com/sanity-io/litter/compare/09e3a73d5b65eac2f14578aec8fb74ee9b4f1a5e...v1.5.1\">compare view</a></li>\n</ul>\n</details>\n<br />\n\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n<details>\n<summary>Dependabot commands and options</summary>\n<br />\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot merge` will merge this PR after your CI passes on it\n- `@dependabot squash and merge` will squash and merge this PR after your CI passes on it\n- `@dependabot cancel merge` will cancel a previously requested merge and block automerging\n- `@dependabot reopen` will reopen this PR if it is closed\n- `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually\n- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot use these labels` will set the current labels as the default for future PRs for this repo and language\n- `@dependabot use these reviewers` will set the current reviewers as the default for future PRs for this repo and language\n- `@dependabot use these assignees` will set the current assignees as the default for future PRs for this repo and language\n- `@dependabot use this milestone` will set the current milestone as the default for future PRs for this repo and language\n- `@dependabot badge me` will comment on this PR with code to add a \"Dependabot enabled\" badge to your readme\n\nAdditionally, you can set the following in your Dependabot [dashboard](https://app.dependabot.com):\n- Update frequency (including time of day and day of week)\n- Pull request limits (per update run and/or open at any time)\n- Automerge options (never/patch/minor, and dev/runtime dependencies)\n- Out-of-range updates (receive only lockfile updates, if desired)\n- Security updates (receive only security updates, if desired)\n\n\n\n</details>","created_at":"2021-06-01T05:00:41Z","updated_at":"2021-06-01T05:00:42Z","closed_at":null,"merged_at":null,"merge_commit_sha":"bf38bfa577ffaab64618d6ac9bd820c60b6aa91e","assignees":[],"requested_reviewers":[],"requested_teams":[],"labels":[{"id":1224325914,"node_id":"MDU6TGFiZWwxMjI0MzI1OTE0","url":"https://api.github.com/repos/src-d/lookout/labels/dependencies","name":"dependencies","color":"0025ff","default":false,"description":"Pull requests that update a dependency file"},{"id":1225436017,"node_id":"MDU6TGFiZWwxMjI1NDM2MDE3","url":"https://api.github.com/repos/src-d/lookout/labels/go","name":"go","color":"16e2e2","default":false,"description":"Pull requests that update Go code"}],"milestone":null,"draft":false,"commits_url":"https://api.github.com/repos/src-d/lookout/pulls/821/commits","review_comments_url":"https://api.github.com/repos/src-d/lookout/pulls/821/comments","review_comment_url":"https://api.github.com/repos/src-d/lookout/pulls/comments{/number}","comments_url":"https://api.github.com/repos/src-d/lookout/issues/821/comments","statuses_url":"https://api.github.com/repos/src-d/lookout/statuses/750092f8f255f26807e8cb07fbb2c2addc32de12","head":{"label":"src-d:dependabot/dep/github.com/sanity-io/litter-1.5.1","ref":"dependabot/dep/github.com/sanity-io/litter-1.5.1","sha":"750092f8f255f26807e8cb07fbb2c2addc32de12","user":{"login":"src-d","id":15128793,"node_id":"MDEyOk9yZ2FuaXphdGlvbjE1MTI4Nzkz","avatar_url":"https://avatars.githubusercontent.com/u/15128793?v=4","gravatar_id":"","url":"https://api.github.com/users/src-d","html_url":"https://github.com/src-d","followers_url":"https://api.github.com/users/src-d/followers","following_url":"https://api.github.com/users/src-d/following{/other_user}","gists_url":"https://api.github.com/users/src-d/gists{/gist_id}","starred_url":"https://api.github.com/users/src-d/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/src-d/subscriptions","organizations_url":"https://api.github.com/users/src-d/orgs","repos_url":"https://api.github.com/users/src-d/repos","events_url":"https://api.github.com/users/src-d/events{/privacy}","received_events_url":"https://api.github.com/users/src-d/received_events","type":"Organization","user_view_type":"public","site_admin":false},"repo":{"id":136146572,"node_id":"MDEwOlJlcG9zaXRvcnkxMzYxNDY1NzI=","name":"lookout","full_name":"src-d/lookout","private":false,"owner":{"login":"src-d","id":15128793,"node_id":"MDEyOk9yZ2FuaXphdGlvbjE1MTI4Nzkz","avatar_url":"https://avatars.githubusercontent.com/u/15128793?v=4","gravatar_id":"","url":"https://api.github.com/users/src-d","html_url":"https://github.com/src-d","followers_url":"https://api.github.com/users/src-d/followers","following_url":"https://api.github.com/users/src-d/following{/other_user}","gists_url":"https://api.github.com/users/src-d/gists{/gist_id}","starred_url":"https://api.github.com/users/src-d/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/src-d/subscriptions","organizations_url":"https://api.github.com/users/src-d/orgs","repos_url":"https://api.github.com/users/src-d/repos","events_url":"https://api.github.com/users/src-d/events{/privacy}","received_events_url":"https://api.github.com/users/src-d/received_events","type":"Organization","user_view_type":"public","site_admin":false},"html_url":"https://github.com/src-d/lookout","description":"Assisted code review, running custom code analyzers on pull requests","fork":false,"url":"https://api.github.com/repos/src-d/lookout","forks_url":"https://api.github.com/repos/src-d/lookout/forks","keys_url":"https://api.github.com/repos/src-d/lookout/keys{/key_id}","collaborators_url":"https://api.github.com/repos/src-d/lookout/collaborators{/collaborator}","teams_url":"https://api.github.com/repos/src-d/lookout/teams","hooks_url":"https://api.github.com/repos/src-d/lookout/hooks","issue_events_url":"https://api.github.com/repos/src-d/lookout/issues/events{/number}","events_url":"https://api.github.com/repos/src-d/lookout/events","assignees_url":"https://api.github.com/repos/src-d/lookout/assignees{/user}","branches_url":"https://api.github.com/repos/src-d/lookout/branches{/branch}","tags_url":"https://api.github.com/repos/src-d/lookout/tags","blobs_url":"https://api.github.com/repos/src-d/lookout/git/blobs{/sha}","git_tags_url":"https://api.github.com/repos/src-d/lookout/git/tags{/sha}","git_refs_url":"https://api.github.com/repos/src-d/lookout/git/refs{/sha}","trees_url":"https://api.github.com/repos/src-d/lookout/git/trees{/sha}","statuses_url":"https://api.github.com/repos/src-d/lookout/statuses/{sha}","languages_url":"https://api.github.com/repos/src-d/lookout/languages","stargazers_url":"https://api.github.com/repos/src-d/lookout/stargazers","contributors_url":"https://api.github.com/repos/src-d/lookout/contributors","subscribers_url":"https://api.github.com/repos/src-d/lookout/subscribers","subscription_url":"https://api.github.com/repos/src-d/lookout/subscription","commits_url":"https://api.github.com/repos/src-d/lookout/commits{/sha}","git_commits_url":"https://api.github.com/repos/src-d/lookout/git/commits{/sha}","comments_url":"https://api.github.com/repos/src-d/lookout/comments{/number}","issue_comment_url":"https://api.github.com/repos/src-d/lookout/issues/comments{/number}","contents_url":"https://api.github.com/repos/src-d/lookout/contents/{+path}","compare_url":"https://api.github.com/repos/src-d/lookout/compare/{base}...{head}","merges_url":"https://api.github.com/repos/src-d/lookout/merges","archive_url":"https://api.github.com/repos/src-d/lookout/{archive_format}{/ref}","downloads_url":"https://api.github.com/repos/src-d/lookout/downloads","issues_url":"https://api.github.com/repos/src-d/lookout/issues{/number}","pulls_url":"https://api.github.com/repos/src-d/lookout/pulls{/number}","milestones_url":"https://api.github.com/repos/src-d/lookout/milestones{/number}","notifications_url":"https://api.github.com/repos/src-d/lookout/notifications{?since,all,participating}","labels_url":"https://api.github.com/repos/src-d/lookout/labels{/name}","releases_url":"https://api.github.com/repos/src-d/lookout/releases{/id}","deployments_url":"https://api.github.com/repos/src-d/lookout/deployments","created_at":"2018-06-05T08:37:23Z","updated_at":"2025-10-05T17:39:33Z","pushed_at":"2021-08-03T19:18:36Z","git_url":"git://github.com/src-d/lookout.git","ssh_url":"git@github.com:src-d/lookout.git","clone_url":"https://github.com/src-d/lookout.git","svn_url":"https://github.com/src-d/lookout","homepage":"https://docs.sourced.tech/lookout","size":60130,"stargazers_count":152,"watchers_count":152,"language":"Go","has_issues":true,"has_projects":false,"has_downloads":true,"has_wiki":false,"has_pages":false,"has_discussions":false,"forks_count":33,"mirror_url":null,"archived":false,"disabled":false,"open_issues_count":84,"license":{"key":"agpl-3.0","name":"GNU Affero General Public License v3.0","spdx_id":"AGPL-3.0","url":"https://api.github.com/licenses/agpl-3.0","node_id":"MDc6TGljZW5zZTE="},"allow_forking":true,"is_template":false,"web_commit_signoff_required":false,"has_pull_requests":true,"pull_request_creation_policy":"all","topics":["code-review","github","lookout"],"visibility":"public","forks":33,"open_issues":84,"watchers":152,"default_branch":"master"}},"base":{"label":"src-d:master","ref":"master","sha":"d5cccd9aed531327965c374533f42e0469af4cda","user":{"login":"src-d","id":15128793,"node_id":"MDEyOk9yZ2FuaXphdGlvbjE1MTI4Nzkz","avatar_url":"https://avatars.githubusercontent.com/u/15128793?v=4","gravatar_id":"","url":"https://api.github.com/users/src-d","html_url":"https://github.com/src-d","followers_url":"https://api.github.com/users/src-d/followers","following_url":"https://api.github.com/users/src-d/following{/other_user}","gists_url":"https://api.github.com/users/src-d/gists{/gist_id}","starred_url":"https://api.github.com/users/src-d/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/src-d/subscriptions","organizations_url":"https://api.github.com/users/src-d/orgs","repos_url":"https://api.github.com/users/src-d/repos","events_url":"https://api.github.com/users/src-d/events{/privacy}","received_events_url":"https://api.github.com/users/src-d/received_events","type":"Organization","user_view_type":"public","site_admin":false},"repo":{"id":136146572,"node_id":"MDEwOlJlcG9zaXRvcnkxMzYxNDY1NzI=","name":"lookout","full_name":"src-d/lookout","private":false,"owner":{"login":"src-d","id":15128793,"node_id":"MDEyOk9yZ2FuaXphdGlvbjE1MTI4Nzkz","avatar_url":"https://avatars.githubusercontent.com/u/15128793?v=4","gravatar_id":"","url":"https://api.github.com/users/src-d","html_url":"https://github.com/src-d","followers_url":"https://api.github.com/users/src-d/followers","following_url":"https://api.github.com/users/src-d/following{/other_user}","gists_url":"https://api.github.com/users/src-d/gists{/gist_id}","starred_url":"https://api.github.com/users/src-d/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/src-d/subscriptions","organizations_url":"https://api.github.com/users/src-d/orgs","repos_url":"https://api.github.com/users/src-d/repos","events_url":"https://api.github.com/users/src-d/events{/privacy}","received_events_url":"https://api.github.com/users/src-d/received_events","type":"Organization","user_view_type":"public","site_admin":false},"html_url":"https://github.com/src-d/lookout","description":"Assisted code review, running custom code analyzers on pull requests","fork":false,"url":"https://api.github.com/repos/src-d/lookout","forks_url":"https://api.github.com/repos/src-d/lookout/forks","keys_url":"https://api.github.com/repos/src-d/lookout/keys{/key_id}","collaborators_url":"https://api.github.com/repos/src-d/lookout/collaborators{/collaborator}","teams_url":"https://api.github.com/repos/src-d/lookout/teams","hooks_url":"https://api.github.com/repos/src-d/lookout/hooks","issue_events_url":"https://api.github.com/repos/src-d/lookout/issues/events{/number}","events_url":"https://api.github.com/repos/src-d/lookout/events","assignees_url":"https://api.github.com/repos/src-d/lookout/assignees{/user}","branches_url":"https://api.github.com/repos/src-d/lookout/branches{/branch}","tags_url":"https://api.github.com/repos/src-d/lookout/tags","blobs_url":"https://api.github.com/repos/src-d/lookout/git/blobs{/sha}","git_tags_url":"https://api.github.com/repos/src-d/lookout/git/tags{/sha}","git_refs_url":"https://api.github.com/repos/src-d/lookout/git/refs{/sha}","trees_url":"https://api.github.com/repos/src-d/lookout/git/trees{/sha}","statuses_url":"https://api.github.com/repos/src-d/lookout/statuses/{sha}","languages_url":"https://api.github.com/repos/src-d/lookout/languages","stargazers_url":"https://api.github.com/repos/src-d/lookout/stargazers","contributors_url":"https://api.github.com/repos/src-d/lookout/contributors","subscribers_url":"https://api.github.com/repos/src-d/lookout/subscribers","subscription_url":"https://api.github.com/repos/src-d/lookout/subscription","commits_url":"https://api.github.com/repos/src-d/lookout/commits{/sha}","git_commits_url":"https://api.github.com/repos/src-d/lookout/git/commits{/sha}","comments_url":"https://api.github.com/repos/src-d/lookout/comments{/number}","issue_comment_url":"https://api.github.com/repos/src-d/lookout/issues/comments{/number}","contents_url":"https://api.github.com/repos/src-d/lookout/contents/{+path}","compare_url":"https://api.github.com/repos/src-d/lookout/compare/{base}...{head}","merges_url":"https://api.github.com/repos/src-d/lookout/merges","archive_url":"https://api.github.com/repos/src-d/lookout/{archive_format}{/ref}","downloads_url":"https://api.github.com/repos/src-d/lookout/downloads","issues_url":"https://api.github.com/repos/src-d/lookout/issues{/number}","pulls_url":"https://api.github.com/repos/src-d/lookout/pulls{/number}","milestones_url":"https://api.github.com/repos/src-d/lookout/milestones{/number}","notifications_url":"https://api.github.com/repos/src-d/lookout/notifications{?since,all,participating}","labels_url":"https://api.github.com/repos/src-d/lookout/labels{/name}","releases_url":"https://api.github.com/repos/src-d/lookout/releases{/id}","deployments_url":"https://api.github.com/repos/src-d/lookout/deployments","created_at":"2018-06-05T08:37:23Z","updated_at":"2025-10-05T17:39:33Z","pushed_at":"2021-08-03T19:18:36Z","git_url":"git://github.com/src-d/lookout.git","ssh_url":"git@github.com:src-d/lookout.git","clone_url":"https://github.com/src-d/lookout.git","svn_url":"https://github.com/src-d/lookout","homepage":"https://docs.sourced.tech/lookout","size":60130,"stargazers_count":152,"watchers_count":152,"language":"Go","has_issues":true,"has_projects":false,"has_downloads":true,"has_wiki":false,"has_pages":false,"has_discussions":false,"forks_count":33,"mirror_url":null,"archived":false,"disabled":false,"open_issues_count":84,"license":{"key":"agpl-3.0","name":"GNU Affero General Public License v3.0","spdx_id":"AGPL-3.0","url":"https://api.github.com/licenses/agpl-3.0","node_id":"MDc6TGljZW5zZTE="},"allow_forking":true,"is_template":false,"web_commit_signoff_required":false,"has_pull_requests":true,"pull_request_creation_policy":"all","topics":["code-review","github","lookout"],"visibility":"public","forks":33,"open_issues":84,"watchers":152,"default_branch":"master"}},"_links":{"self":{"href":"https://api.github.com/repos/src-d/lookout/pulls/821"},"html":{"href":"https://github.com/src-d/lookout/pull/821"},"issue":{"href":"https://api.github.com/repos/src-d/lookout/issues/821"},"comments":{"href":"https://api.github.com/repos/src-d/lookout/issues/821/comments"},"review_comments":{"href":"https://api.github.com/repos/src-d/lookout/pulls/821/comments"},"review_comment":{"href":"https://api.github.com/repos/src-d/lookout/pulls/comments{/number}"},"commits":{"href":"https://api.github.com/repos/src-d/lookout/pulls/821/commits"},"statuses":{"href":"https://api.github.com/repos/src-d/lookout/statuses/750092f8f255f26807e8cb07fbb2c2addc32de12"}},"author_association":"NONE","auto_merge":null,"assignee":null,"active_lock_reason":null},{"url":"https://api.github.com/repos/src-d/lookout/pulls/819","id":633159479,"node_id":"MDExOlB1bGxSZXF1ZXN0NjMzMTU5NDc5","html_url":"https://github.com/src-d/lookout/pull/819","diff_url":"https://github.com/src-d/lookout/pull/819.diff","patch_url":"https://github.com/src-d/lookout/pull/819.patch","issue_url":"https://api.github.com/repos/src-d/lookout/issues/819","number":819,"state":"open","locked":false,"title":"[Security] Bump hosted-git-info from 2.7.1 to 2.8.9 in /frontend","user":{"login":"dependabot-preview[bot]","id":27856297,"node_id":"MDM6Qm90Mjc4NTYyOTc=","avatar_url":"https://avatars.githubusercontent.com/in/2141?v=4","gravatar_id":"","url":"https://api.github.com/users/dependabot-preview%5Bbot%5D","html_url":"https://github.com/apps/dependabot-preview","followers_url":"https://api.github.com/users/dependabot-preview%5Bbot%5D/followers","following_url":"https://api.github.com/users/dependabot-preview%5Bbot%5D/following{/other_user}","gists_url":"https://api.github.com/users/dependabot-preview%5Bbot%5D/gists{/gist_id}","starred_url":"https://api.github.com/users/dependabot-preview%5Bbot%5D/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/dependabot-preview%5Bbot%5D/subscriptions","organizations_url":"https://api.github.com/users/dependabot-preview%5Bbot%5D/orgs","repos_url":"https://api.github.com/users/dependabot-preview%5Bbot%5D/repos","events_url":"https://api.github.com/users/dependabot-preview%5Bbot%5D/events{/privacy}","received_events_url":"https://api.github.com/users/dependabot-preview%5Bbot%5D/received_events","type":"Bot","user_view_type":"public","site_admin":false},"body":"Bumps [hosted-git-info](https://github.com/npm/hosted-git-info) from 2.7.1 to 2.8.9. **This update includes a security fix.**\n<details>\n<summary>Vulnerabilities fixed</summary>\n<p><em>Sourced from <a href=\"https://github.com/advisories/GHSA-43f8-2h32-f4cj\">The GitHub Security Advisory Database</a>.</em></p>\n<blockquote>\n<p><strong>Regular Expression Denial of Service in hosted-git-info</strong>\nThe npm package <code>hosted-git-info</code> before 3.0.8 are vulnerable to Regular Expression Denial of Service (ReDoS) via regular expression shortcutMatch in the fromUrl function in index.js. The affected regular expression exhibits polynomial worst-case time complexity</p>\n<p>Affected versions: &lt; 2.8.9</p>\n</blockquote>\n</details>\n<details>\n<summary>Changelog</summary>\n<p><em>Sourced from <a href=\"https://github.com/npm/hosted-git-info/blob/v2.8.9/CHANGELOG.md\">hosted-git-info's changelog</a>.</em></p>\n<blockquote>\n<h2><a href=\"https://github.com/npm/hosted-git-info/compare/v2.8.8...v2.8.9\">2.8.9</a> (2021-04-07)</h2>\n<h3>Bug Fixes</h3>\n<ul>\n<li>backport regex fix from <a href=\"https://github-redirect.dependabot.com/npm/hosted-git-info/issues/76\">#76</a> (<a href=\"https://github.com/npm/hosted-git-info/commit/29adfe5\">29adfe5</a>), closes <a href=\"https://github-redirect.dependabot.com/npm/hosted-git-info/issues/84\">#84</a></li>\n</ul>\n<p><!-- raw HTML omitted --><!-- raw HTML omitted --></p>\n<h2><a href=\"https://github.com/npm/hosted-git-info/compare/v2.8.7...v2.8.8\">2.8.8</a> (2020-02-29)</h2>\n<h3>Bug Fixes</h3>\n<ul>\n<li><a href=\"https://github-redirect.dependabot.com/npm/hosted-git-info/issues/61\">#61</a> &amp; <a href=\"https://github-redirect.dependabot.com/npm/hosted-git-info/issues/65\">#65</a> addressing issues w/ url.URL implmentation which regressed node 6 support (<a href=\"https://github.com/npm/hosted-git-info/commit/5038b18\">5038b18</a>), closes <a href=\"https://github-redirect.dependabot.com/npm/hosted-git-info/issues/66\">#66</a></li>\n</ul>\n<p><!-- raw HTML omitted --><!-- raw HTML omitted --></p>\n<h2><a href=\"https://github.com/npm/hosted-git-info/compare/v2.8.6...v2.8.7\">2.8.7</a> (2020-02-26)</h2>\n<h3>Bug Fixes</h3>\n<ul>\n<li>Do not attempt to use url.URL when unavailable (<a href=\"https://github.com/npm/hosted-git-info/commit/2d0bb66\">2d0bb66</a>), closes <a href=\"https://github-redirect.dependabot.com/npm/hosted-git-info/issues/61\">#61</a> <a href=\"https://github-redirect.dependabot.com/npm/hosted-git-info/issues/62\">#62</a></li>\n<li>Do not pass scp-style URLs to the WhatWG url.URL (<a href=\"https://github.com/npm/hosted-git-info/commit/f2cdfcf\">f2cdfcf</a>), closes <a href=\"https://github-redirect.dependabot.com/npm/hosted-git-info/issues/60\">#60</a></li>\n</ul>\n<p><!-- raw HTML omitted --><!-- raw HTML omitted --></p>\n<h2><a href=\"https://github.com/npm/hosted-git-info/compare/v2.8.5...v2.8.6\">2.8.6</a> (2020-02-25)</h2>\n<p><!-- raw HTML omitted --><!-- raw HTML omitted --></p>\n<h2><a href=\"https://github.com/npm/hosted-git-info/compare/v2.8.4...v2.8.5\">2.8.5</a> (2019-10-07)</h2>\n<h3>Bug Fixes</h3>\n<ul>\n<li>updated pathmatch for gitlab (<a href=\"https://github.com/npm/hosted-git-info/commit/e8325b5\">e8325b5</a>), closes <a href=\"https://github-redirect.dependabot.com/npm/hosted-git-info/issues/51\">#51</a></li>\n<li>updated pathmatch for gitlab (<a href=\"https://github.com/npm/hosted-git-info/commit/ffe056f\">ffe056f</a>)</li>\n</ul>\n<p><!-- raw HTML omitted --><!-- raw HTML omitted --></p>\n<h2><a href=\"https://github.com/npm/hosted-git-info/compare/v2.8.3...v2.8.4\">2.8.4</a> (2019-08-12)</h2>\n<!-- raw HTML omitted -->\n</blockquote>\n<p>... (truncated)</p>\n</details>\n<details>\n<summary>Commits</summary>\n<ul>\n<li><a href=\"https://github.com/npm/hosted-git-info/commit/8d4b3697d79bcd89cdb36d1db165e3696c783a01\"><code>8d4b369</code></a> chore(release): 2.8.9</li>\n<li><a href=\"https://github.com/npm/hosted-git-info/commit/29adfe5ef789784c861b2cdeb15051ec2ba651a7\"><code>29adfe5</code></a> fix: backport regex fix from <a href=\"https://github-redirect.dependabot.com/npm/hosted-git-info/issues/76\">#76</a></li>\n<li><a href=\"https://github.com/npm/hosted-git-info/commit/afeaefdd86ba9bb5044be3c1554a666d007cf19a\"><code>afeaefd</code></a> chore(release): 2.8.8</li>\n<li><a href=\"https://github.com/npm/hosted-git-info/commit/5038b1891a61ca3cd7453acbf85d7011fe0086bb\"><code>5038b18</code></a> fix: <a href=\"https://github-redirect.dependabot.com/npm/hosted-git-info/issues/61\">#61</a> &amp; <a href=\"https://github-redirect.dependabot.com/npm/hosted-git-info/issues/65\">#65</a> addressing issues w/ url.URL implmentation which regressed nod...</li>\n<li><a href=\"https://github.com/npm/hosted-git-info/commit/7440afa859162051c191e55d8ecfaf69a193b026\"><code>7440afa</code></a> chore(release): 2.8.7</li>\n<li><a href=\"https://github.com/npm/hosted-git-info/commit/2d0bb6615ecb8f9ef1019bc0737aab7f6449641f\"><code>2d0bb66</code></a> fix: Do not attempt to use url.URL when unavailable</li>\n<li><a href=\"https://github.com/npm/hosted-git-info/commit/f2cdfcf33ad2bd3bd1acdba0326281089f53c5b1\"><code>f2cdfcf</code></a> fix: Do not pass scp-style URLs to the WhatWG url.URL</li>\n<li><a href=\"https://github.com/npm/hosted-git-info/commit/e1b83df5d9cb1f8bb220352e20565560548d2292\"><code>e1b83df</code></a> chore(release): 2.8.6</li>\n<li><a href=\"https://github.com/npm/hosted-git-info/commit/ff259a6117c62df488e927820e30bec2f7ee453f\"><code>ff259a6</code></a> Ensure passwords in hosted Git URLs are correctly escaped</li>\n<li><a href=\"https://github.com/npm/hosted-git-info/commit/624fd6f301dd5a1fd7ad1b333d6f8921a12ff98c\"><code>624fd6f</code></a> chore(release): 2.8.5</li>\n<li>Additional commits viewable in <a href=\"https://github.com/npm/hosted-git-info/compare/v2.7.1...v2.8.9\">compare view</a></li>\n</ul>\n</details>\n<details>\n<summary>Maintainer changes</summary>\n<p>This version was pushed to npm by <a href=\"https://www.npmjs.com/~nlf\">nlf</a>, a new releaser for hosted-git-info since your current version.</p>\n</details>\n<br />\n\n\n[![Dependabot compatibility score](https://api.dependabot.com/badges/compatibility_score?dependency-name=hosted-git-info&package-manager=npm_and_yarn&previous-version=2.7.1&new-version=2.8.9)](https://dependabot.com/compatibility-score/?dependency-name=hosted-git-info&package-manager=npm_and_yarn&previous-version=2.7.1&new-version=2.8.9)\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n<details>\n<summary>Dependabot commands and options</summary>\n<br />\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot merge` will merge this PR after your CI passes on it\n- `@dependabot squash and merge` will squash and merge this PR after your CI passes on it\n- `@dependabot cancel merge` will cancel a previously requested merge and block automerging\n- `@dependabot reopen` will reopen this PR if it is closed\n- `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually\n- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot use these labels` will set the current labels as the default for future PRs for this repo and language\n- `@dependabot use these reviewers` will set the current reviewers as the default for future PRs for this repo and language\n- `@dependabot use these assignees` will set the current assignees as the default for future PRs for this repo and language\n- `@dependabot use this milestone` will set the current milestone as the default for future PRs for this repo and language\n- `@dependabot badge me` will comment on this PR with code to add a \"Dependabot enabled\" badge to your readme\n\nAdditionally, you can set the following in your Dependabot [dashboard](https://app.dependabot.com):\n- Update frequency (including time of day and day of week)\n- Pull request limits (per update run and/or open at any time)\n- Automerge options (never/patch/minor, and dev/runtime dependencies)\n- Out-of-range updates (receive only lockfile updates, if desired)\n- Security updates (receive only security updates, if desired)\n\n\n\n</details>","created_at":"2021-05-07T17:53:11Z","updated_at":"2021-05-07T17:53:12Z","closed_at":null,"merged_at":null,"merge_commit_sha":"cbfd09103cecd8064dd922c03139244248330191","assignees":[],"requested_reviewers":[],"requested_teams":[],"labels":[{"id":1224325914,"node_id":"MDU6TGFiZWwxMjI0MzI1OTE0","url":"https://api.github.com/repos/src-d/lookout/labels/dependencies","name":"dependencies","color":"0025ff","default":false,"description":"Pull requests that update a dependency file"},{"id":1225416698,"node_id":"MDU6TGFiZWwxMjI1NDE2Njk4","url":"https://api.github.com/repos/src-d/lookout/labels/javascript","name":"javascript","color":"168700","default":false,"description":"Pull requests that update Javascript code"},{"id":1445656551,"node_id":"MDU6TGFiZWwxNDQ1NjU2NTUx","url":"https://api.github.com/repos/src-d/lookout/labels/security","name":"security","color":"ee0701","default":false,"description":"Pull requests that address a security vulnerability"}],"milestone":null,"draft":false,"commits_url":"https://api.github.com/repos/src-d/lookout/pulls/819/commits","review_comments_url":"https://api.github.com/repos/src-d/lookout/pulls/819/comments","review_comment_url":"https://api.github.com/repos/src-d/lookout/pulls/comments{/number}","comments_url":"https://api.github.com/repos/src-d/lookout/issues/819/comments","statuses_url":"https://api.github.com/repos/src-d/lookout/statuses/9954fff8e24f9cc3037b965702af790d87749f46","head":{"label":"src-d:dependabot/npm_and_yarn/frontend/hosted-git-info-2.8.9","ref":"dependabot/npm_and_yarn/frontend/hosted-git-info-2.8.9","sha":"9954fff8e24f9cc3037b965702af790d87749f46","user":{"login":"src-d","id":15128793,"node_id":"MDEyOk9yZ2FuaXphdGlvbjE1MTI4Nzkz","avatar_url":"https://avatars.githubusercontent.com/u/15128793?v=4","gravatar_id":"","url":"https://api.github.com/users/src-d","html_url":"https://github.com/src-d","followers_url":"https://api.github.com/users/src-d/followers","following_url":"https://api.github.com/users/src-d/following{/other_user}","gists_url":"https://api.github.com/users/src-d/gists{/gist_id}","starred_url":"https://api.github.com/users/src-d/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/src-d/subscriptions","organizations_url":"https://api.github.com/users/src-d/orgs","repos_url":"https://api.github.com/users/src-d/repos","events_url":"https://api.github.com/users/src-d/events{/privacy}","received_events_url":"https://api.github.com/users/src-d/received_events","type":"Organization","user_view_type":"public","site_admin":false},"repo":{"id":136146572,"node_id":"MDEwOlJlcG9zaXRvcnkxMzYxNDY1NzI=","name":"lookout","full_name":"src-d/lookout","private":false,"owner":{"login":"src-d","id":15128793,"node_id":"MDEyOk9yZ2FuaXphdGlvbjE1MTI4Nzkz","avatar_url":"https://avatars.githubusercontent.com/u/15128793?v=4","gravatar_id":"","url":"https://api.github.com/users/src-d","html_url":"https://github.com/src-d","followers_url":"https://api.github.com/users/src-d/followers","following_url":"https://api.github.com/users/src-d/following{/other_user}","gists_url":"https://api.github.com/users/src-d/gists{/gist_id}","starred_url":"https://api.github.com/users/src-d/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/src-d/subscriptions","organizations_url":"https://api.github.com/users/src-d/orgs","repos_url":"https://api.github.com/users/src-d/repos","events_url":"https://api.github.com/users/src-d/events{/privacy}","received_events_url":"https://api.github.com/users/src-d/received_events","type":"Organization","user_view_type":"public","site_admin":false},"html_url":"https://github.com/src-d/lookout","description":"Assisted code review, running custom code analyzers on pull requests","fork":false,"url":"https://api.github.com/repos/src-d/lookout","forks_url":"https://api.github.com/repos/src-d/lookout/forks","keys_url":"https://api.github.com/repos/src-d/lookout/keys{/key_id}","collaborators_url":"https://api.github.com/repos/src-d/lookout/collaborators{/collaborator}","teams_url":"https://api.github.com/repos/src-d/lookout/teams","hooks_url":"https://api.github.com/repos/src-d/lookout/hooks","issue_events_url":"https://api.github.com/repos/src-d/lookout/issues/events{/number}","events_url":"https://api.github.com/repos/src-d/lookout/events","assignees_url":"https://api.github.com/repos/src-d/lookout/assignees{/user}","branches_url":"https://api.github.com/repos/src-d/lookout/branches{/branch}","tags_url":"https://api.github.com/repos/src-d/lookout/tags","blobs_url":"https://api.github.com/repos/src-d/lookout/git/blobs{/sha}","git_tags_url":"https://api.github.com/repos/src-d/lookout/git/tags{/sha}","git_refs_url":"https://api.github.com/repos/src-d/lookout/git/refs{/sha}","trees_url":"https://api.github.com/repos/src-d/lookout/git/trees{/sha}","statuses_url":"https://api.github.com/repos/src-d/lookout/statuses/{sha}","languages_url":"https://api.github.com/repos/src-d/lookout/languages","stargazers_url":"https://api.github.com/repos/src-d/lookout/stargazers","contributors_url":"https://api.github.com/repos/src-d/lookout/contributors","subscribers_url":"https://api.github.com/repos/src-d/lookout/subscribers","subscription_url":"https://api.github.com/repos/src-d/lookout/subscription","commits_url":"https://api.github.com/repos/src-d/lookout/commits{/sha}","git_commits_url":"https://api.github.com/repos/src-d/lookout/git/commits{/sha}","comments_url":"https://api.github.com/repos/src-d/lookout/comments{/number}","issue_comment_url":"https://api.github.com/repos/src-d/lookout/issues/comments{/number}","contents_url":"https://api.github.com/repos/src-d/lookout/contents/{+path}","compare_url":"https://api.github.com/repos/src-d/lookout/compare/{base}...{head}","merges_url":"https://api.github.com/repos/src-d/lookout/merges","archive_url":"https://api.github.com/repos/src-d/lookout/{archive_format}{/ref}","downloads_url":"https://api.github.com/repos/src-d/lookout/downloads","issues_url":"https://api.github.com/repos/src-d/lookout/issues{/number}","pulls_url":"https://api.github.com/repos/src-d/lookout/pulls{/number}","milestones_url":"https://api.github.com/repos/src-d/lookout/milestones{/number}","notifications_url":"https://api.github.com/repos/src-d/lookout/notifications{?since,all,participating}","labels_url":"https://api.github.com/repos/src-d/lookout/labels{/name}","releases_url":"https://api.github.com/repos/src-d/lookout/releases{/id}","deployments_url":"https://api.github.com/repos/src-d/lookout/deployments","created_at":"2018-06-05T08:37:23Z","updated_at":"2025-10-05T17:39:33Z","pushed_at":"2021-08-03T19:18:36Z","git_url":"git://github.com/src-d/lookout.git","ssh_url":"git@github.com:src-d/lookout.git","clone_url":"https://github.com/src-d/lookout.git","svn_url":"https://github.com/src-d/lookout","homepage":"https://docs.sourced.tech/lookout","size":60130,"stargazers_count":152,"watchers_count":152,"language":"Go","has_issues":true,"has_projects":false,"has_downloads":true,"has_wiki":false,"has_pages":false,"has_discussions":false,"forks_count":33,"mirror_url":null,"archived":false,"disabled":false,"open_issues_count":84,"license":{"key":"agpl-3.0","name":"GNU Affero General Public License v3.0","spdx_id":"AGPL-3.0","url":"https://api.github.com/licenses/agpl-3.0","node_id":"MDc6TGljZW5zZTE="},"allow_forking":true,"is_template":false,"web_commit_signoff_required":false,"has_pull_requests":true,"pull_request_creation_policy":"all","topics":["code-review","github","lookout"],"visibility":"public","forks":33,"open_issues":84,"watchers":152,"default_branch":"master"}},"base":{"label":"src-d:master","ref":"master","sha":"d5cccd9aed531327965c374533f42e0469af4cda","user":{"login":"src-d","id":15128793,"node_id":"MDEyOk9yZ2FuaXphdGlvbjE1MTI4Nzkz","avatar_url":"https://avatars.githubusercontent.com/u/15128793?v=4","gravatar_id":"","url":"https://api.github.com/users/src-d","html_url":"https://github.com/src-d","followers_url":"https://api.github.com/users/src-d/followers","following_url":"https://api.github.com/users/src-d/following{/other_user}","gists_url":"https://api.github.com/users/src-d/gists{/gist_id}","starred_url":"https://api.github.com/users/src-d/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/src-d/subscriptions","organizations_url":"https://api.github.com/users/src-d/orgs","repos_url":"https://api.github.com/users/src-d/repos","events_url":"https://api.github.com/users/src-d/events{/privacy}","received_events_url":"https://api.github.com/users/src-d/received_events","type":"Organization","user_view_type":"public","site_admin":false},"repo":{"id":136146572,"node_id":"MDEwOlJlcG9zaXRvcnkxMzYxNDY1NzI=","name":"lookout","full_name":"src-d/lookout","private":false,"owner":{"login":"src-d","id":15128793,"node_id":"MDEyOk9yZ2FuaXphdGlvbjE1MTI4Nzkz","avatar_url":"https://avatars.githubusercontent.com/u/15128793?v=4","gravatar_id":"","url":"https://api.github.com/users/src-d","html_url":"https://github.com/src-d","followers_url":"https://api.github.com/users/src-d/followers","following_url":"https://api.github.com/users/src-d/following{/other_user}","gists_url":"https://api.github.com/users/src-d/gists{/gist_id}","starred_url":"https://api.github.com/users/src-d/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/src-d/subscriptions","organizations_url":"https://api.github.com/users/src-d/orgs","repos_url":"https://api.github.com/users/src-d/repos","events_url":"https://api.github.com/users/src-d/events{/privacy}","received_events_url":"https://api.github.com/users/src-d/received_events","type":"Organization","user_view_type":"public","site_admin":false},"html_url":"https://github.com/src-d/lookout","description":"Assisted code review, running custom code analyzers on pull requests","fork":false,"url":"https://api.github.com/repos/src-d/lookout","forks_url":"https://api.github.com/repos/src-d/lookout/forks","keys_url":"https://api.github.com/repos/src-d/lookout/keys{/key_id}","collaborators_url":"https://api.github.com/repos/src-d/lookout/collaborators{/collaborator}","teams_url":"https://api.github.com/repos/src-d/lookout/teams","hooks_url":"https://api.github.com/repos/src-d/lookout/hooks","issue_events_url":"https://api.github.com/repos/src-d/lookout/issues/events{/number}","events_url":"https://api.github.com/repos/src-d/lookout/events","assignees_url":"https://api.github.com/repos/src-d/lookout/assignees{/user}","branches_url":"https://api.github.com/repos/src-d/lookout/branches{/branch}","tags_url":"https://api.github.com/repos/src-d/lookout/tags","blobs_url":"https://api.github.com/repos/src-d/lookout/git/blobs{/sha}","git_tags_url":"https://api.github.com/repos/src-d/lookout/git/tags{/sha}","git_refs_url":"https://api.github.com/repos/src-d/lookout/git/refs{/sha}","trees_url":"https://api.github.com/repos/src-d/lookout/git/trees{/sha}","statuses_url":"https://api.github.com/repos/src-d/lookout/statuses/{sha}","languages_url":"https://api.github.com/repos/src-d/lookout/languages","stargazers_url":"https://api.github.com/repos/src-d/lookout/stargazers","contributors_url":"https://api.github.com/repos/src-d/lookout/contributors","subscribers_url":"https://api.github.com/repos/src-d/lookout/subscribers","subscription_url":"https://api.github.com/repos/src-d/lookout/subscription","commits_url":"https://api.github.com/repos/src-d/lookout/commits{/sha}","git_commits_url":"https://api.github.com/repos/src-d/lookout/git/commits{/sha}","comments_url":"https://api.github.com/repos/src-d/lookout/comments{/number}","issue_comment_url":"https://api.github.com/repos/src-d/lookout/issues/comments{/number}","contents_url":"https://api.github.com/repos/src-d/lookout/contents/{+path}","compare_url":"https://api.github.com/repos/src-d/lookout/compare/{base}...{head}","merges_url":"https://api.github.com/repos/src-d/lookout/merges","archive_url":"https://api.github.com/repos/src-d/lookout/{archive_format}{/ref}","downloads_url":"https://api.github.com/repos/src-d/lookout/downloads","issues_url":"https://api.github.com/repos/src-d/lookout/issues{/number}","pulls_url":"https://api.github.com/repos/src-d/lookout/pulls{/number}","milestones_url":"https://api.github.com/repos/src-d/lookout/milestones{/number}","notifications_url":"https://api.github.com/repos/src-d/lookout/notifications{?since,all,participating}","labels_url":"https://api.github.com/repos/src-d/lookout/labels{/name}","releases_url":"https://api.github.com/repos/src-d/lookout/releases{/id}","deployments_url":"https://api.github.com/repos/src-d/lookout/deployments","created_at":"2018-06-05T08:37:23Z","updated_at":"2025-10-05T17:39:33Z","pushed_at":"2021-08-03T19:18:36Z","git_url":"git://github.com/src-d/lookout.git","ssh_url":"git@github.com:src-d/lookout.git","clone_url":"https://github.com/src-d/lookout.git","svn_url":"https://github.com/src-d/lookout","homepage":"https://docs.sourced.tech/lookout","size":60130,"stargazers_count":152,"watchers_count":152,"language":"Go","has_issues":true,"has_projects":false,"has_downloads":true,"has_wiki":false,"has_pages":false,"has_discussions":false,"forks_count":33,"mirror_url":null,"archived":false,"disabled":false,"open_issues_count":84,"license":{"key":"agpl-3.0","name":"GNU Affero General Public License v3.0","spdx_id":"AGPL-3.0","url":"https://api.github.com/licenses/agpl-3.0","node_id":"MDc6TGljZW5zZTE="},"allow_forking":true,"is_template":false,"web_commit_signoff_required":false,"has_pull_requests":true,"pull_request_creation_policy":"all","topics":["code-review","github","lookout"],"visibility":"public","forks":33,"open_issues":84,"watchers":152,"default_branch":"master"}},"_links":{"self":{"href":"https://api.github.com/repos/src-d/lookout/pulls/819"},"html":{"href":"https://github.com/src-d/lookout/pull/819"},"issue":{"href":"https://api.github.com/repos/src-d/lookout/issues/819"},"comments":{"href":"https://api.github.com/repos/src-d/lookout/issues/819/comments"},"review_comments":{"href":"https://api.github.com/repos/src-d/lookout/pulls/819/comments"},"review_comment":{"href":"https://api.github.com/repos/src-d/lookout/pulls/comments{/number}"},"commits":{"href":"https://api.github.com/repos/src-d/lookout/pulls/819/commits"},"statuses":{"href":"https://api.github.com/repos/src-d/lookout/statuses/9954fff8e24f9cc3037b965702af790d87749f46"}},"author_association":"NONE","auto_merge":null,"assignee":null,"active_lock_reason":null},{"url":"https://api.github.com/repos/src-d/lookout/pulls/818","id":631654426,"node_id":"MDExOlB1bGxSZXF1ZXN0NjMxNjU0NDI2","html_url":"https://github.com/src-d/lookout/pull/818","diff_url":"https://github.com/src-d/lookout/pull/818.diff","patch_url":"https://github.com/src-d/lookout/pull/818.patch","issue_url":"https://api.github.com/repos/src-d/lookout/issues/818","number":818,"state":"open","locked":false,"title":"[Security] Bump url-parse from 1.4.4 to 1.5.1 in /frontend","user":{"login":"dependabot-preview[bot]","id":27856297,"node_id":"MDM6Qm90Mjc4NTYyOTc=","avatar_url":"https://avatars.githubusercontent.com/in/2141?v=4","gravatar_id":"","url":"https://api.github.com/users/dependabot-preview%5Bbot%5D","html_url":"https://github.com/apps/dependabot-preview","followers_url":"https://api.github.com/users/dependabot-preview%5Bbot%5D/followers","following_url":"https://api.github.com/users/dependabot-preview%5Bbot%5D/following{/other_user}","gists_url":"https://api.github.com/users/dependabot-preview%5Bbot%5D/gists{/gist_id}","starred_url":"https://api.github.com/users/dependabot-preview%5Bbot%5D/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/dependabot-preview%5Bbot%5D/subscriptions","organizations_url":"https://api.github.com/users/dependabot-preview%5Bbot%5D/orgs","repos_url":"https://api.github.com/users/dependabot-preview%5Bbot%5D/repos","events_url":"https://api.github.com/users/dependabot-preview%5Bbot%5D/events{/privacy}","received_events_url":"https://api.github.com/users/dependabot-preview%5Bbot%5D/received_events","type":"Bot","user_view_type":"public","site_admin":false},"body":"Bumps [url-parse](https://github.com/unshiftio/url-parse) from 1.4.4 to 1.5.1. **This update includes a security fix.**\n<details>\n<summary>Vulnerabilities fixed</summary>\n<p><em>Sourced from <a href=\"https://github.com/advisories/GHSA-9m6j-fcg5-2442\">The GitHub Security Advisory Database</a>.</em></p>\n<blockquote>\n<p><strong>Path reaversal in url-parse</strong>\nurl-parse before 1.5.0 mishandles certain uses of backslash such as http:/ and interprets the URI as a relative path.</p>\n<p>Affected versions: &lt; 1.5.0</p>\n</blockquote>\n</details>\n<details>\n<summary>Commits</summary>\n<ul>\n<li><a href=\"https://github.com/unshiftio/url-parse/commit/eb6d9f51e395b7e47bf2594e457d541db21c713b\"><code>eb6d9f5</code></a> [dist] 1.5.1</li>\n<li><a href=\"https://github.com/unshiftio/url-parse/commit/750d8e8a9d45dbce9ff09759f0fe4564cdd47d74\"><code>750d8e8</code></a> [fix] Fixes relative path resolving <a href=\"https://github-redirect.dependabot.com/unshiftio/url-parse/issues/199\">#199</a> <a href=\"https://github-redirect.dependabot.com/unshiftio/url-parse/issues/200\">#200</a> (<a href=\"https://github-redirect.dependabot.com/unshiftio/url-parse/issues/201\">#201</a>)</li>\n<li><a href=\"https://github.com/unshiftio/url-parse/commit/3ac777474ba5dc48a7e33771cbb311fc6f69bef8\"><code>3ac7774</code></a> [test] Make test consistent for browser testing</li>\n<li><a href=\"https://github.com/unshiftio/url-parse/commit/267a0c6f7ef1a58271be61611c5103daace602c9\"><code>267a0c6</code></a> [dist] 1.5.0</li>\n<li><a href=\"https://github.com/unshiftio/url-parse/commit/d1e7e8822f26e8a49794b757123b51386325b2b0\"><code>d1e7e88</code></a> [security] More backslash fixes (<a href=\"https://github-redirect.dependabot.com/unshiftio/url-parse/issues/197\">#197</a>)</li>\n<li><a href=\"https://github.com/unshiftio/url-parse/commit/d99bf4cf259b7378c855f786edc253e70405ffdc\"><code>d99bf4c</code></a> [ignore] Remove npm-debug.log from .gitignore</li>\n<li><a href=\"https://github.com/unshiftio/url-parse/commit/422c8b5e4cac6a79cd35b4e86731476dcbeec7e4\"><code>422c8b5</code></a> [pkg] Replace nyc with c8</li>\n<li><a href=\"https://github.com/unshiftio/url-parse/commit/933809d630c7b21399b4e5df59fccccd80033b21\"><code>933809d</code></a> [pkg] Move coveralls to dev dependencies</li>\n<li><a href=\"https://github.com/unshiftio/url-parse/commit/190b2168035899a2a88f2dc2625963bf7e2f338f\"><code>190b216</code></a> [pkg] Add .npmrc</li>\n<li><a href=\"https://github.com/unshiftio/url-parse/commit/ce3783f4ea25753cfa36376769c14e4e2fe6ea80\"><code>ce3783f</code></a> [test] Do not test on all available versions of Edge and Safari</li>\n<li>Additional commits viewable in <a href=\"https://github.com/unshiftio/url-parse/compare/1.4.4...1.5.1\">compare view</a></li>\n</ul>\n</details>\n<br />\n\n\n[![Dependabot compatibility score](https://api.dependabot.com/badges/compatibility_score?dependency-name=url-parse&package-manager=npm_and_yarn&previous-version=1.4.4&new-version=1.5.1)](https://dependabot.com/compatibility-score/?dependency-name=url-parse&package-manager=npm_and_yarn&previous-version=1.4.4&new-version=1.5.1)\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n<details>\n<summary>Dependabot commands and options</summary>\n<br />\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot merge` will merge this PR after your CI passes on it\n- `@dependabot squash and merge` will squash and merge this PR after your CI passes on it\n- `@dependabot cancel merge` will cancel a previously requested merge and block automerging\n- `@dependabot reopen` will reopen this PR if it is closed\n- `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually\n- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot use these labels` will set the current labels as the default for future PRs for this repo and language\n- `@dependabot use these reviewers` will set the current reviewers as the default for future PRs for this repo and language\n- `@dependabot use these assignees` will set the current assignees as the default for future PRs for this repo and language\n- `@dependabot use this milestone` will set the current milestone as the default for future PRs for this repo and language\n- `@dependabot badge me` will comment on this PR with code to add a \"Dependabot enabled\" badge to your readme\n\nAdditionally, you can set the following in your Dependabot [dashboard](https://app.dependabot.com):\n- Update frequency (including time of day and day of week)\n- Pull request limits (per update run and/or open at any time)\n- Automerge options (never/patch/minor, and dev/runtime dependencies)\n- Out-of-range updates (receive only lockfile updates, if desired)\n- Security updates (receive only security updates, if desired)\n\n\n\n</details>","created_at":"2021-05-06T17:14:21Z","updated_at":"2021-05-06T17:14:22Z","closed_at":null,"merged_at":null,"merge_commit_sha":"41a1f1ca5812d3c3beac4fcb5fad2c209a541877","assignees":[],"requested_reviewers":[],"requested_teams":[],"labels":[{"id":1224325914,"node_id":"MDU6TGFiZWwxMjI0MzI1OTE0","url":"https://api.github.com/repos/src-d/lookout/labels/dependencies","name":"dependencies","color":"0025ff","default":false,"description":"Pull requests that update a dependency file"},{"id":1225416698,"node_id":"MDU6TGFiZWwxMjI1NDE2Njk4","url":"https://api.github.com/repos/src-d/lookout/labels/javascript","name":"javascript","color":"168700","default":false,"description":"Pull requests that update Javascript code"},{"id":1445656551,"node_id":"MDU6TGFiZWwxNDQ1NjU2NTUx","url":"https://api.github.com/repos/src-d/lookout/labels/security","name":"security","color":"ee0701","default":false,"description":"Pull requests that address a security vulnerability"}],"milestone":null,"draft":false,"commits_url":"https://api.github.com/repos/src-d/lookout/pulls/818/commits","review_comments_url":"https://api.github.com/repos/src-d/lookout/pulls/818/comments","review_comment_url":"https://api.github.com/repos/src-d/lookout/pulls/comments{/number}","comments_url":"https://api.github.com/repos/src-d/lookout/issues/818/comments","statuses_url":"https://api.github.com/repos/src-d/lookout/statuses/b870394942d2f30f4ba8732daf9600422ceb3b0f","head":{"label":"src-d:dependabot/npm_and_yarn/frontend/url-parse-1.5.1","ref":"dependabot/npm_and_yarn/frontend/url-parse-1.5.1","sha":"b870394942d2f30f4ba8732daf9600422ceb3b0f","user":{"login":"src-d","id":15128793,"node_id":"MDEyOk9yZ2FuaXphdGlvbjE1MTI4Nzkz","avatar_url":"https://avatars.githubusercontent.com/u/15128793?v=4","gravatar_id":"","url":"https://api.github.com/users/src-d","html_url":"https://github.com/src-d","followers_url":"https://api.github.com/users/src-d/followers","following_url":"https://api.github.com/users/src-d/following{/other_user}","gists_url":"https://api.github.com/users/src-d/gists{/gist_id}","starred_url":"https://api.github.com/users/src-d/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/src-d/subscriptions","organizations_url":"https://api.github.com/users/src-d/orgs","repos_url":"https://api.github.com/users/src-d/repos","events_url":"https://api.github.com/users/src-d/events{/privacy}","received_events_url":"https://api.github.com/users/src-d/received_events","type":"Organization","user_view_type":"public","site_admin":false},"repo":{"id":136146572,"node_id":"MDEwOlJlcG9zaXRvcnkxMzYxNDY1NzI=","name":"lookout","full_name":"src-d/lookout","private":false,"owner":{"login":"src-d","id":15128793,"node_id":"MDEyOk9yZ2FuaXphdGlvbjE1MTI4Nzkz","avatar_url":"https://avatars.githubusercontent.com/u/15128793?v=4","gravatar_id":"","url":"https://api.github.com/users/src-d","html_url":"https://github.com/src-d","followers_url":"https://api.github.com/users/src-d/followers","following_url":"https://api.github.com/users/src-d/following{/other_user}","gists_url":"https://api.github.com/users/src-d/gists{/gist_id}","starred_url":"https://api.github.com/users/src-d/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/src-d/subscriptions","organizations_url":"https://api.github.com/users/src-d/orgs","repos_url":"https://api.github.com/users/src-d/repos","events_url":"https://api.github.com/users/src-d/events{/privacy}","received_events_url":"https://api.github.com/users/src-d/received_events","type":"Organization","user_view_type":"public","site_admin":false},"html_url":"https://github.com/src-d/lookout","description":"Assisted code review, running custom code analyzers on pull requests","fork":false,"url":"https://api.github.com/repos/src-d/lookout","forks_url":"https://api.github.com/repos/src-d/lookout/forks","keys_url":"https://api.github.com/repos/src-d/lookout/keys{/key_id}","collaborators_url":"https://api.github.com/repos/src-d/lookout/collaborators{/collaborator}","teams_url":"https://api.github.com/repos/src-d/lookout/teams","hooks_url":"https://api.github.com/repos/src-d/lookout/hooks","issue_events_url":"https://api.github.com/repos/src-d/lookout/issues/events{/number}","events_url":"https://api.github.com/repos/src-d/lookout/events","assignees_url":"https://api.github.com/repos/src-d/lookout/assignees{/user}","branches_url":"https://api.github.com/repos/src-d/lookout/branches{/branch}","tags_url":"https://api.github.com/repos/src-d/lookout/tags","blobs_url":"https://api.github.com/repos/src-d/lookout/git/blobs{/sha}","git_tags_url":"https://api.github.com/repos/src-d/lookout/git/tags{/sha}","git_refs_url":"https://api.github.com/repos/src-d/lookout/git/refs{/sha}","trees_url":"https://api.github.com/repos/src-d/lookout/git/trees{/sha}","statuses_url":"https://api.github.com/repos/src-d/lookout/statuses/{sha}","languages_url":"https://api.github.com/repos/src-d/lookout/languages","stargazers_url":"https://api.github.com/repos/src-d/lookout/stargazers","contributors_url":"https://api.github.com/repos/src-d/lookout/contributors","subscribers_url":"https://api.github.com/repos/src-d/lookout/subscribers","subscription_url":"https://api.github.com/repos/src-d/lookout/subscription","commits_url":"https://api.github.com/repos/src-d/lookout/commits{/sha}","git_commits_url":"https://api.github.com/repos/src-d/lookout/git/commits{/sha}","comments_url":"https://api.github.com/repos/src-d/lookout/comments{/number}","issue_comment_url":"https://api.github.com/repos/src-d/lookout/issues/comments{/number}","contents_url":"https://api.github.com/repos/src-d/lookout/contents/{+path}","compare_url":"https://api.github.com/repos/src-d/lookout/compare/{base}...{head}","merges_url":"https://api.github.com/repos/src-d/lookout/merges","archive_url":"https://api.github.com/repos/src-d/lookout/{archive_format}{/ref}","downloads_url":"https://api.github.com/repos/src-d/lookout/downloads","issues_url":"https://api.github.com/repos/src-d/lookout/issues{/number}","pulls_url":"https://api.github.com/repos/src-d/lookout/pulls{/number}","milestones_url":"https://api.github.com/repos/src-d/lookout/milestones{/number}","notifications_url":"https://api.github.com/repos/src-d/lookout/notifications{?since,all,participating}","labels_url":"https://api.github.com/repos/src-d/lookout/labels{/name}","releases_url":"https://api.github.com/repos/src-d/lookout/releases{/id}","deployments_url":"https://api.github.com/repos/src-d/lookout/deployments","created_at":"2018-06-05T08:37:23Z","updated_at":"2025-10-05T17:39:33Z","pushed_at":"2021-08-03T19:18:36Z","git_url":"git://github.com/src-d/lookout.git","ssh_url":"git@github.com:src-d/lookout.git","clone_url":"https://github.com/src-d/lookout.git","svn_url":"https://github.com/src-d/lookout","homepage":"https://docs.sourced.tech/lookout","size":60130,"stargazers_count":152,"watchers_count":152,"language":"Go","has_issues":true,"has_projects":false,"has_downloads":true,"has_wiki":false,"has_pages":false,"has_discussions":false,"forks_count":33,"mirror_url":null,"archived":false,"disabled":false,"open_issues_count":84,"license":{"key":"agpl-3.0","name":"GNU Affero General Public License v3.0","spdx_id":"AGPL-3.0","url":"https://api.github.com/licenses/agpl-3.0","node_id":"MDc6TGljZW5zZTE="},"allow_forking":true,"is_template":false,"web_commit_signoff_required":false,"has_pull_requests":true,"pull_request_creation_policy":"all","topics":["code-review","github","lookout"],"visibility":"public","forks":33,"open_issues":84,"watchers":152,"default_branch":"master"}},"base":{"label":"src-d:master","ref":"master","sha":"d5cccd9aed531327965c374533f42e0469af4cda","user":{"login":"src-d","id":15128793,"node_id":"MDEyOk9yZ2FuaXphdGlvbjE1MTI4Nzkz","avatar_url":"https://avatars.githubusercontent.com/u/15128793?v=4","gravatar_id":"","url":"https://api.github.com/users/src-d","html_url":"https://github.com/src-d","followers_url":"https://api.github.com/users/src-d/followers","following_url":"https://api.github.com/users/src-d/following{/other_user}","gists_url":"https://api.github.com/users/src-d/gists{/gist_id}","starred_url":"https://api.github.com/users/src-d/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/src-d/subscriptions","organizations_url":"https://api.github.com/users/src-d/orgs","repos_url":"https://api.github.com/users/src-d/repos","events_url":"https://api.github.com/users/src-d/events{/privacy}","received_events_url":"https://api.github.com/users/src-d/received_events","type":"Organization","user_view_type":"public","site_admin":false},"repo":{"id":136146572,"node_id":"MDEwOlJlcG9zaXRvcnkxMzYxNDY1NzI=","name":"lookout","full_name":"src-d/lookout","private":false,"owner":{"login":"src-d","id":15128793,"node_id":"MDEyOk9yZ2FuaXphdGlvbjE1MTI4Nzkz","avatar_url":"https://avatars.githubusercontent.com/u/15128793?v=4","gravatar_id":"","url":"https://api.github.com/users/src-d","html_url":"https://github.com/src-d","followers_url":"https://api.github.com/users/src-d/followers","following_url":"https://api.github.com/users/src-d/following{/other_user}","gists_url":"https://api.github.com/users/src-d/gists{/gist_id}","starred_url":"https://api.github.com/users/src-d/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/src-d/subscriptions","organizations_url":"https://api.github.com/users/src-d/orgs","repos_url":"https://api.github.com/users/src-d/repos","events_url":"https://api.github.com/users/src-d/events{/privacy}","received_events_url":"https://api.github.com/users/src-d/received_events","type":"Organization","user_view_type":"public","site_admin":false},"html_url":"https://github.com/src-d/lookout","description":"Assisted code review, running custom code analyzers on pull requests","fork":false,"url":"https://api.github.com/repos/src-d/lookout","forks_url":"https://api.github.com/repos/src-d/lookout/forks","keys_url":"https://api.github.com/repos/src-d/lookout/keys{/key_id}","collaborators_url":"https://api.github.com/repos/src-d/lookout/collaborators{/collaborator}","teams_url":"https://api.github.com/repos/src-d/lookout/teams","hooks_url":"https://api.github.com/repos/src-d/lookout/hooks","issue_events_url":"https://api.github.com/repos/src-d/lookout/issues/events{/number}","events_url":"https://api.github.com/repos/src-d/lookout/events","assignees_url":"https://api.github.com/repos/src-d/lookout/assignees{/user}","branches_url":"https://api.github.com/repos/src-d/lookout/branches{/branch}","tags_url":"https://api.github.com/repos/src-d/lookout/tags","blobs_url":"https://api.github.com/repos/src-d/lookout/git/blobs{/sha}","git_tags_url":"https://api.github.com/repos/src-d/lookout/git/tags{/sha}","git_refs_url":"https://api.github.com/repos/src-d/lookout/git/refs{/sha}","trees_url":"https://api.github.com/repos/src-d/lookout/git/trees{/sha}","statuses_url":"https://api.github.com/repos/src-d/lookout/statuses/{sha}","languages_url":"https://api.github.com/repos/src-d/lookout/languages","stargazers_url":"https://api.github.com/repos/src-d/lookout/stargazers","contributors_url":"https://api.github.com/repos/src-d/lookout/contributors","subscribers_url":"https://api.github.com/repos/src-d/lookout/subscribers","subscription_url":"https://api.github.com/repos/src-d/lookout/subscription","commits_url":"https://api.github.com/repos/src-d/lookout/commits{/sha}","git_commits_url":"https://api.github.com/repos/src-d/lookout/git/commits{/sha}","comments_url":"https://api.github.com/repos/src-d/lookout/comments{/number}","issue_comment_url":"https://api.github.com/repos/src-d/lookout/issues/comments{/number}","contents_url":"https://api.github.com/repos/src-d/lookout/contents/{+path}","compare_url":"https://api.github.com/repos/src-d/lookout/compare/{base}...{head}","merges_url":"https://api.github.com/repos/src-d/lookout/merges","archive_url":"https://api.github.com/repos/src-d/lookout/{archive_format}{/ref}","downloads_url":"https://api.github.com/repos/src-d/lookout/downloads","issues_url":"https://api.github.com/repos/src-d/lookout/issues{/number}","pulls_url":"https://api.github.com/repos/src-d/lookout/pulls{/number}","milestones_url":"https://api.github.com/repos/src-d/lookout/milestones{/number}","notifications_url":"https://api.github.com/repos/src-d/lookout/notifications{?since,all,participating}","labels_url":"https://api.github.com/repos/src-d/lookout/labels{/name}","releases_url":"https://api.github.com/repos/src-d/lookout/releases{/id}","deployments_url":"https://api.github.com/repos/src-d/lookout/deployments","created_at":"2018-06-05T08:37:23Z","updated_at":"2025-10-05T17:39:33Z","pushed_at":"2021-08-03T19:18:36Z","git_url":"git://github.com/src-d/lookout.git","ssh_url":"git@github.com:src-d/lookout.git","clone_url":"https://github.com/src-d/lookout.git","svn_url":"https://github.com/src-d/lookout","homepage":"https://docs.sourced.tech/lookout","size":60130,"stargazers_count":152,"watchers_count":152,"language":"Go","has_issues":true,"has_projects":false,"has_downloads":true,"has_wiki":false,"has_pages":false,"has_discussions":false,"forks_count":33,"mirror_url":null,"archived":false,"disabled":false,"open_issues_count":84,"license":{"key":"agpl-3.0","name":"GNU Affero General Public License v3.0","spdx_id":"AGPL-3.0","url":"https://api.github.com/licenses/agpl-3.0","node_id":"MDc6TGljZW5zZTE="},"allow_forking":true,"is_template":false,"web_commit_signoff_required":false,"has_pull_requests":true,"pull_request_creation_policy":"all","topics":["code-review","github","lookout"],"visibility":"public","forks":33,"open_issues":84,"watchers":152,"default_branch":"master"}},"_links":{"self":{"href":"https://api.github.com/repos/src-d/lookout/pulls/818"},"html":{"href":"https://github.com/src-d/lookout/pull/818"},"issue":{"href":"https://api.github.com/repos/src-d/lookout/issues/818"},"comments":{"href":"https://api.github.com/repos/src-d/lookout/issues/818/comments"},"review_comments":{"href":"https://api.github.com/repos/src-d/lookout/pulls/818/comments"},"review_comment":{"href":"https://api.github.com/repos/src-d/lookout/pulls/comments{/number}"},"commits":{"href":"https://api.github.com/repos/src-d/lookout/pulls/818/commits"},"statuses":{"href":"https://api.github.com/repos/src-d/lookout/statuses/b870394942d2f30f4ba8732daf9600422ceb3b0f"}},"author_association":"NONE","auto_merge":null,"assignee":null,"active_lock_reason":null},{"url":"https://api.github.com/repos/src-d/lookout/pulls/813","id":628325938,"node_id":"MDExOlB1bGxSZXF1ZXN0NjI4MzI1OTM4","html_url":"https://github.com/src-d/lookout/pull/813","diff_url":"https://github.com/src-d/lookout/pull/813.diff","patch_url":"https://github.com/src-d/lookout/pull/813.patch","issue_url":"https://api.github.com/repos/src-d/lookout/issues/813","number":813,"state":"open","locked":false,"title":"[Security] Bump handlebars from 4.1.0 to 4.7.7 in /frontend","user":{"login":"dependabot-preview[bot]","id":27856297,"node_id":"MDM6Qm90Mjc4NTYyOTc=","avatar_url":"https://avatars.githubusercontent.com/in/2141?v=4","gravatar_id":"","url":"https://api.github.com/users/dependabot-preview%5Bbot%5D","html_url":"https://github.com/apps/dependabot-preview","followers_url":"https://api.github.com/users/dependabot-preview%5Bbot%5D/followers","following_url":"https://api.github.com/users/dependabot-preview%5Bbot%5D/following{/other_user}","gists_url":"https://api.github.com/users/dependabot-preview%5Bbot%5D/gists{/gist_id}","starred_url":"https://api.github.com/users/dependabot-preview%5Bbot%5D/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/dependabot-preview%5Bbot%5D/subscriptions","organizations_url":"https://api.github.com/users/dependabot-preview%5Bbot%5D/orgs","repos_url":"https://api.github.com/users/dependabot-preview%5Bbot%5D/repos","events_url":"https://api.github.com/users/dependabot-preview%5Bbot%5D/events{/privacy}","received_events_url":"https://api.github.com/users/dependabot-preview%5Bbot%5D/received_events","type":"Bot","user_view_type":"public","site_admin":false},"body":"Bumps [handlebars](https://github.com/wycats/handlebars.js) from 4.1.0 to 4.7.7. **This update includes security fixes.**\n<details>\n<summary>Vulnerabilities fixed</summary>\n<p><em>Sourced from <a href=\"https://github.com/advisories/GHSA-w457-6q6x-cgp9\">The GitHub Security Advisory Database</a>.</em></p>\n<blockquote>\n<p><strong>High severity vulnerability that affects handlebars</strong>\nVersions of handlebars prior to 4.3.0 are vulnerable to Prototype Pollution leading to Remote Code Execution. Templates may alter an Object's <strong>proto</strong> and <strong>defineGetter</strong> properties, which may allow an attacker to execute arbitrary code through crafted payloads.</p>\n<p>Affected versions: &lt; 4.3.0</p>\n</blockquote>\n<p><em>Sourced from <a href=\"https://github.com/nodejs/security-wg/blob/master/vuln/npm/519.json\">The Node Security Working Group</a>.</em></p>\n<blockquote>\n<p><strong>Denial of Service</strong>\nCrash Node.js process from handlebars using a small and simple source</p>\n<p>Affected versions: &lt;4.6.0</p>\n</blockquote>\n<p><em>Sourced from <a href=\"https://github.com/advisories/GHSA-q42p-pg8m-cqh6\">The GitHub Security Advisory Database</a>.</em></p>\n<blockquote>\n<p><strong>Prototype Pollution in handlebars</strong>\nVersions of <code>handlebars</code> prior to 4.0.14 are vulnerable to Prototype Pollution. Templates may alter an Objects' prototype, thus allowing an attacker to execute arbitrary code on the server.</p>\n<h2>Recommendation</h2>\n<p>For handlebars 4.1.x upgrade to 4.1.2 or later.\nFor handlebars 4.0.x upgrade to 4.0.14 or later.</p>\n<p>Affected versions: &gt;= 4.1.0 &lt; 4.1.2</p>\n</blockquote>\n<p><em>Sourced from <a href=\"https://github.com/advisories/GHSA-f52g-6jhx-586p\">The GitHub Security Advisory Database</a>.</em></p>\n<blockquote>\n<p><strong>Denial of Service in handlebars</strong>\nAffected versions of <code>handlebars</code> are vulnerable to Denial of Service. The package's parser may be forced into an endless loop while processing specially-crafted templates. This may allow attackers to exhaust system resources leading to Denial of Service.</p>\n<h2>Recommendation</h2>\n<p>Upgrade to version 4.4.5 or later.</p>\n<p>Affected versions: &gt;= 4.0.0 &lt; 4.4.5</p>\n</blockquote>\n<p><em>Sourced from <a href=\"https://github.com/advisories/GHSA-2cf5-4w76-r9qv\">The GitHub Security Advisory Database</a>.</em></p>\n<blockquote>\n<p><strong>Arbitrary Code Execution in handlebars</strong>\nVersions of <code>handlebars</code> prior to 3.0.8 or 4.5.2 are vulnerable to Arbitrary Code Execution. The package's lookup helper fails to properly validate templates, allowing attackers to submit templates that execute arbitrary JavaScript in the system. It can be used to run arbitrary code in a server processing Handlebars templates or on a victim's browser (effectively serving as Cross-Site Scripting).</p>\n<p>The following template can be used to demonstrate the vulnerability:</p>\n<pre lang=\"{{#with\" data-meta=\"&quot;constructor&quot;}}\"><code>\t{{#with split as |a|}}\n\t\t{{pop (push &quot;alert('Vulnerable Handlebars JS');&quot;)}}\n\t\t{{#with (concat (lookup join (slice 0 1)))}}\n\t\t\t{{#each (slice 2 3)}}\n\t\t\t\t{{#with (apply 0 a)}}\n\t\t\t\t\t{{.}}\n\t\t\t\t{{/with}}\n\t\t\t{{/each}}\n\t\t{{/with}}\n\t{{/with}}\n{{/with}}```\n<h2>Recommendation</h2>\n<p>Upgrade to version 3.0.8, 4.5.2 or later.</p>\n<p>Affected versions: &gt;= 4.0.0 &lt; 4.5.2\n</code></pre></p>\n</blockquote>\n<p><em>Sourced from <a href=\"https://github.com/advisories/GHSA-g9r4-xpmj-mj65\">The GitHub Security Advisory Database</a>.</em></p>\n<blockquote>\n<p><strong>Prototype Pollution in handlebars</strong>\nVersions of <code>handlebars</code> prior to 3.0.8 or 4.5.3 are vulnerable to prototype pollution. It is possible to add or modify properties to the Object prototype through a malicious template. This may allow attackers to crash the application or execute Arbitrary Code in specific conditions.</p>\n<h2>Recommendation</h2>\n<p>Upgrade to version 3.0.8, 4.5.3 or later.</p>\n<p>Affected versions: &gt;= 4.0.0 &lt; 4.5.3</p>\n</blockquote>\n</details>\n<details>\n<summary>Changelog</summary>\n<p><em>Sourced from <a href=\"https://github.com/handlebars-lang/handlebars.js/blob/master/release-notes.md\">handlebars's changelog</a>.</em></p>\n<blockquote>\n<h2>v4.7.7 - February 15th, 2021</h2>\n<ul>\n<li>fix weird error in integration tests - eb860c0</li>\n<li>fix: check prototype property access in strict-mode (<a href=\"https://github-redirect.dependabot.com/wycats/handlebars.js/issues/1736\">#1736</a>) - b6d3de7</li>\n<li>fix: escape property names in compat mode (<a href=\"https://github-redirect.dependabot.com/wycats/handlebars.js/issues/1736\">#1736</a>) - f058970</li>\n<li>refactor: In spec tests, use expectTemplate over equals and shouldThrow (<a href=\"https://github-redirect.dependabot.com/wycats/handlebars.js/issues/1683\">#1683</a>) - 77825f8</li>\n<li>chore: start testing on Node.js 12 and 13 - 3789a30</li>\n</ul>\n<p>(POSSIBLY) BREAKING CHANGES:</p>\n<ul>\n<li>the changes from version <a href=\"https://github.com/handlebars-lang/handlebars.js/blob/master/release-notes.md#v460---january-8th-2020\">4.6.0</a> now also apply\nin when using the compile-option &quot;strict: true&quot;. Access to prototype properties is forbidden completely by default, specific properties or methods\ncan be allowed via runtime-options. See <a href=\"https://github-redirect.dependabot.com/wycats/handlebars.js/issues/1633\">#1633</a> for details. If you are using Handlebars as documented, you should not be accessing prototype properties\nfrom your template anyway, so the changes should not be a problem for you. Only the use of undocumented features can break your build.</li>\n</ul>\n<p>That is why we only bump the patch version despite mentioning breaking changes.</p>\n<p><a href=\"https://github.com/wycats/handlebars.js/compare/v4.7.6...v4.7.7\">Commits</a></p>\n<h2>v4.7.6 - April 3rd, 2020</h2>\n<p>Chore/Housekeeping:</p>\n<ul>\n<li><a href=\"https://github-redirect.dependabot.com/wycats/handlebars.js/issues/1672\">#1672</a> - Switch cmd parser to latest minimist (<a href=\"https://api.github.com/users/dougwilson\"><code>@​dougwilson</code></a></li>\n</ul>\n<p>Compatibility notes:</p>\n<ul>\n<li>Restored Node.js compatibility</li>\n</ul>\n<p><a href=\"https://github.com/wycats/handlebars.js/compare/v4.7.5...v4.7.6\">Commits</a></p>\n<h2>v4.7.5 - April 2nd, 2020</h2>\n<p>Chore/Housekeeping:</p>\n<ul>\n<li><del>Node.js version support has been changed to v6+</del> Reverted in 4.7.6</li>\n</ul>\n<p>Compatibility notes:</p>\n<ul>\n<li><del>Node.js &lt; v6 is no longer supported</del> Reverted in 4.7.6</li>\n</ul>\n<p><a href=\"https://github.com/wycats/handlebars.js/compare/v4.7.4...v4.7.5\">Commits</a></p>\n<h2>v4.7.4 - April 1st, 2020</h2>\n<p>Chore/Housekeeping:</p>\n<ul>\n<li><a href=\"https://github-redirect.dependabot.com/wycats/handlebars.js/issues/1666\">#1666</a> - Replaced minimist with yargs for handlebars CLI (<a href=\"https://api.github.com/users/aorinevo\"><code>@​aorinevo</code></a>, <a href=\"https://api.github.com/users/AviVahl\"><code>@​AviVahl</code></a> &amp; <a href=\"https://api.github.com/users/fabb\"><code>@​fabb</code></a>)</li>\n</ul>\n<p>Compatibility notes:</p>\n<!-- raw HTML omitted -->\n</blockquote>\n<p>... (truncated)</p>\n</details>\n<details>\n<summary>Commits</summary>\n<ul>\n<li><a href=\"https://github.com/handlebars-lang/handlebars.js/commit/a9a8e403213583ca90cb7c872d3a22796c37d961\"><code>a9a8e40</code></a> v4.7.7</li>\n<li><a href=\"https://github.com/handlebars-lang/handlebars.js/commit/e66aed5b99c1b6c93564f37d627e34e5d60eb76e\"><code>e66aed5</code></a> Update release notes</li>\n<li><a href=\"https://github.com/handlebars-lang/handlebars.js/commit/7d4d170ce46a53084a41920c5c7387c131357989\"><code>7d4d170</code></a> disable IE in Saucelabs tests</li>\n<li><a href=\"https://github.com/handlebars-lang/handlebars.js/commit/eb860c08998f8f506360d305d89e1f4b40f72a0a\"><code>eb860c0</code></a> fix weird error in integration tests</li>\n<li><a href=\"https://github.com/handlebars-lang/handlebars.js/commit/b6d3de7123eebba603e321f04afdbae608e8fea8\"><code>b6d3de7</code></a> fix: check prototype property access in strict-mode (<a href=\"https://github-redirect.dependabot.com/wycats/handlebars.js/issues/1736\">#1736</a>)</li>\n<li><a href=\"https://github.com/handlebars-lang/handlebars.js/commit/f0589701698268578199be25285b2ebea1c1e427\"><code>f058970</code></a> fix: escape property names in compat mode (<a href=\"https://github-redirect.dependabot.com/wycats/handlebars.js/issues/1736\">#1736</a>)</li>\n<li><a href=\"https://github.com/handlebars-lang/handlebars.js/commit/77825f8d3522356feb8e4160fac16344104d192b\"><code>77825f8</code></a> refator: In spec tests, use expectTemplate over equals and shouldThrow (<a href=\"https://github-redirect.dependabot.com/wycats/handlebars.js/issues/1683\">#1683</a>)</li>\n<li><a href=\"https://github.com/handlebars-lang/handlebars.js/commit/3789a309554fd600caeae442f40881cf93eb3b54\"><code>3789a30</code></a> chore: start testing on Node.js 12 and 13</li>\n<li><a href=\"https://github.com/handlebars-lang/handlebars.js/commit/e6ad93ea01bcde1f8ddaa4b4ebe572dd616abfaa\"><code>e6ad93e</code></a> v4.7.6</li>\n<li><a href=\"https://github.com/handlebars-lang/handlebars.js/commit/2bf4fc6fd3ae3d8f076d628653f284d85faebeb4\"><code>2bf4fc6</code></a> Update release notes</li>\n<li>Additional commits viewable in <a href=\"https://github.com/wycats/handlebars.js/compare/v4.1.0...v4.7.7\">compare view</a></li>\n</ul>\n</details>\n<br />\n\n\n[![Dependabot compatibility score](https://api.dependabot.com/badges/compatibility_score?dependency-name=handlebars&package-manager=npm_and_yarn&previous-version=4.1.0&new-version=4.7.7)](https://dependabot.com/compatibility-score/?dependency-name=handlebars&package-manager=npm_and_yarn&previous-version=4.1.0&new-version=4.7.7)\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n<details>\n<summary>Dependabot commands and options</summary>\n<br />\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot merge` will merge this PR after your CI passes on it\n- `@dependabot squash and merge` will squash and merge this PR after your CI passes on it\n- `@dependabot cancel merge` will cancel a previously requested merge and block automerging\n- `@dependabot reopen` will reopen this PR if it is closed\n- `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually\n- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot use these labels` will set the current labels as the default for future PRs for this repo and language\n- `@dependabot use these reviewers` will set the current reviewers as the default for future PRs for this repo and language\n- `@dependabot use these assignees` will set the current assignees as the default for future PRs for this repo and language\n- `@dependabot use this milestone` will set the current milestone as the default for future PRs for this repo and language\n- `@dependabot badge me` will comment on this PR with code to add a \"Dependabot enabled\" badge to your readme\n\nAdditionally, you can set the following in your Dependabot [dashboard](https://app.dependabot.com):\n- Update frequency (including time of day and day of week)\n- Pull request limits (per update run and/or open at any time)\n- Automerge options (never/patch/minor, and dev/runtime dependencies)\n- Out-of-range updates (receive only lockfile updates, if desired)\n- Security updates (receive only security updates, if desired)\n\n\n\n</details>","created_at":"2021-05-01T04:15:53Z","updated_at":"2021-05-01T04:15:54Z","closed_at":null,"merged_at":null,"merge_commit_sha":"639f56f6038783ccb828dcede0f7a070baa6844e","assignees":[],"requested_reviewers":[],"requested_teams":[],"labels":[{"id":1224325914,"node_id":"MDU6TGFiZWwxMjI0MzI1OTE0","url":"https://api.github.com/repos/src-d/lookout/labels/dependencies","name":"dependencies","color":"0025ff","default":false,"description":"Pull requests that update a dependency file"},{"id":1225416698,"node_id":"MDU6TGFiZWwxMjI1NDE2Njk4","url":"https://api.github.com/repos/src-d/lookout/labels/javascript","name":"javascript","color":"168700","default":false,"description":"Pull requests that update Javascript code"},{"id":1445656551,"node_id":"MDU6TGFiZWwxNDQ1NjU2NTUx","url":"https://api.github.com/repos/src-d/lookout/labels/security","name":"security","color":"ee0701","default":false,"description":"Pull requests that address a security vulnerability"}],"milestone":null,"draft":false,"commits_url":"https://api.github.com/repos/src-d/lookout/pulls/813/commits","review_comments_url":"https://api.github.com/repos/src-d/lookout/pulls/813/comments","review_comment_url":"https://api.github.com/repos/src-d/lookout/pulls/comments{/number}","comments_url":"https://api.github.com/repos/src-d/lookout/issues/813/comments","statuses_url":"https://api.github.com/repos/src-d/lookout/statuses/bc7d601dc984aad8ca550abef171233cf733ad88","head":{"label":"src-d:dependabot/npm_and_yarn/frontend/handlebars-4.7.7","ref":"dependabot/npm_and_yarn/frontend/handlebars-4.7.7","sha":"bc7d601dc984aad8ca550abef171233cf733ad88","user":{"login":"src-d","id":15128793,"node_id":"MDEyOk9yZ2FuaXphdGlvbjE1MTI4Nzkz","avatar_url":"https://avatars.githubusercontent.com/u/15128793?v=4","gravatar_id":"","url":"https://api.github.com/users/src-d","html_url":"https://github.com/src-d","followers_url":"https://api.github.com/users/src-d/followers","following_url":"https://api.github.com/users/src-d/following{/other_user}","gists_url":"https://api.github.com/users/src-d/gists{/gist_id}","starred_url":"https://api.github.com/users/src-d/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/src-d/subscriptions","organizations_url":"https://api.github.com/users/src-d/orgs","repos_url":"https://api.github.com/users/src-d/repos","events_url":"https://api.github.com/users/src-d/events{/privacy}","received_events_url":"https://api.github.com/users/src-d/received_events","type":"Organization","user_view_type":"public","site_admin":false},"repo":{"id":136146572,"node_id":"MDEwOlJlcG9zaXRvcnkxMzYxNDY1NzI=","name":"lookout","full_name":"src-d/lookout","private":false,"owner":{"login":"src-d","id":15128793,"node_id":"MDEyOk9yZ2FuaXphdGlvbjE1MTI4Nzkz","avatar_url":"https://avatars.githubusercontent.com/u/15128793?v=4","gravatar_id":"","url":"https://api.github.com/users/src-d","html_url":"https://github.com/src-d","followers_url":"https://api.github.com/users/src-d/followers","following_url":"https://api.github.com/users/src-d/following{/other_user}","gists_url":"https://api.github.com/users/src-d/gists{/gist_id}","starred_url":"https://api.github.com/users/src-d/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/src-d/subscriptions","organizations_url":"https://api.github.com/users/src-d/orgs","repos_url":"https://api.github.com/users/src-d/repos","events_url":"https://api.github.com/users/src-d/events{/privacy}","received_events_url":"https://api.github.com/users/src-d/received_events","type":"Organization","user_view_type":"public","site_admin":false},"html_url":"https://github.com/src-d/lookout","description":"Assisted code review, running custom code analyzers on pull requests","fork":false,"url":"https://api.github.com/repos/src-d/lookout","forks_url":"https://api.github.com/repos/src-d/lookout/forks","keys_url":"https://api.github.com/repos/src-d/lookout/keys{/key_id}","collaborators_url":"https://api.github.com/repos/src-d/lookout/collaborators{/collaborator}","teams_url":"https://api.github.com/repos/src-d/lookout/teams","hooks_url":"https://api.github.com/repos/src-d/lookout/hooks","issue_events_url":"https://api.github.com/repos/src-d/lookout/issues/events{/number}","events_url":"https://api.github.com/repos/src-d/lookout/events","assignees_url":"https://api.github.com/repos/src-d/lookout/assignees{/user}","branches_url":"https://api.github.com/repos/src-d/lookout/branches{/branch}","tags_url":"https://api.github.com/repos/src-d/lookout/tags","blobs_url":"https://api.github.com/repos/src-d/lookout/git/blobs{/sha}","git_tags_url":"https://api.github.com/repos/src-d/lookout/git/tags{/sha}","git_refs_url":"https://api.github.com/repos/src-d/lookout/git/refs{/sha}","trees_url":"https://api.github.com/repos/src-d/lookout/git/trees{/sha}","statuses_url":"https://api.github.com/repos/src-d/lookout/statuses/{sha}","languages_url":"https://api.github.com/repos/src-d/lookout/languages","stargazers_url":"https://api.github.com/repos/src-d/lookout/stargazers","contributors_url":"https://api.github.com/repos/src-d/lookout/contributors","subscribers_url":"https://api.github.com/repos/src-d/lookout/subscribers","subscription_url":"https://api.github.com/repos/src-d/lookout/subscription","commits_url":"https://api.github.com/repos/src-d/lookout/commits{/sha}","git_commits_url":"https://api.github.com/repos/src-d/lookout/git/commits{/sha}","comments_url":"https://api.github.com/repos/src-d/lookout/comments{/number}","issue_comment_url":"https://api.github.com/repos/src-d/lookout/issues/comments{/number}","contents_url":"https://api.github.com/repos/src-d/lookout/contents/{+path}","compare_url":"https://api.github.com/repos/src-d/lookout/compare/{base}...{head}","merges_url":"https://api.github.com/repos/src-d/lookout/merges","archive_url":"https://api.github.com/repos/src-d/lookout/{archive_format}{/ref}","downloads_url":"https://api.github.com/repos/src-d/lookout/downloads","issues_url":"https://api.github.com/repos/src-d/lookout/issues{/number}","pulls_url":"https://api.github.com/repos/src-d/lookout/pulls{/number}","milestones_url":"https://api.github.com/repos/src-d/lookout/milestones{/number}","notifications_url":"https://api.github.com/repos/src-d/lookout/notifications{?since,all,participating}","labels_url":"https://api.github.com/repos/src-d/lookout/labels{/name}","releases_url":"https://api.github.com/repos/src-d/lookout/releases{/id}","deployments_url":"https://api.github.com/repos/src-d/lookout/deployments","created_at":"2018-06-05T08:37:23Z","updated_at":"2025-10-05T17:39:33Z","pushed_at":"2021-08-03T19:18:36Z","git_url":"git://github.com/src-d/lookout.git","ssh_url":"git@github.com:src-d/lookout.git","clone_url":"https://github.com/src-d/lookout.git","svn_url":"https://github.com/src-d/lookout","homepage":"https://docs.sourced.tech/lookout","size":60130,"stargazers_count":152,"watchers_count":152,"language":"Go","has_issues":true,"has_projects":false,"has_downloads":true,"has_wiki":false,"has_pages":false,"has_discussions":false,"forks_count":33,"mirror_url":null,"archived":false,"disabled":false,"open_issues_count":84,"license":{"key":"agpl-3.0","name":"GNU Affero General Public License v3.0","spdx_id":"AGPL-3.0","url":"https://api.github.com/licenses/agpl-3.0","node_id":"MDc6TGljZW5zZTE="},"allow_forking":true,"is_template":false,"web_commit_signoff_required":false,"has_pull_requests":true,"pull_request_creation_policy":"all","topics":["code-review","github","lookout"],"visibility":"public","forks":33,"open_issues":84,"watchers":152,"default_branch":"master"}},"base":{"label":"src-d:master","ref":"master","sha":"d5cccd9aed531327965c374533f42e0469af4cda","user":{"login":"src-d","id":15128793,"node_id":"MDEyOk9yZ2FuaXphdGlvbjE1MTI4Nzkz","avatar_url":"https://avatars.githubusercontent.com/u/15128793?v=4","gravatar_id":"","url":"https://api.github.com/users/src-d","html_url":"https://github.com/src-d","followers_url":"https://api.github.com/users/src-d/followers","following_url":"https://api.github.com/users/src-d/following{/other_user}","gists_url":"https://api.github.com/users/src-d/gists{/gist_id}","starred_url":"https://api.github.com/users/src-d/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/src-d/subscriptions","organizations_url":"https://api.github.com/users/src-d/orgs","repos_url":"https://api.github.com/users/src-d/repos","events_url":"https://api.github.com/users/src-d/events{/privacy}","received_events_url":"https://api.github.com/users/src-d/received_events","type":"Organization","user_view_type":"public","site_admin":false},"repo":{"id":136146572,"node_id":"MDEwOlJlcG9zaXRvcnkxMzYxNDY1NzI=","name":"lookout","full_name":"src-d/lookout","private":false,"owner":{"login":"src-d","id":15128793,"node_id":"MDEyOk9yZ2FuaXphdGlvbjE1MTI4Nzkz","avatar_url":"https://avatars.githubusercontent.com/u/15128793?v=4","gravatar_id":"","url":"https://api.github.com/users/src-d","html_url":"https://github.com/src-d","followers_url":"https://api.github.com/users/src-d/followers","following_url":"https://api.github.com/users/src-d/following{/other_user}","gists_url":"https://api.github.com/users/src-d/gists{/gist_id}","starred_url":"https://api.github.com/users/src-d/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/src-d/subscriptions","organizations_url":"https://api.github.com/users/src-d/orgs","repos_url":"https://api.github.com/users/src-d/repos","events_url":"https://api.github.com/users/src-d/events{/privacy}","received_events_url":"https://api.github.com/users/src-d/received_events","type":"Organization","user_view_type":"public","site_admin":false},"html_url":"https://github.com/src-d/lookout","description":"Assisted code review, running custom code analyzers on pull requests","fork":false,"url":"https://api.github.com/repos/src-d/lookout","forks_url":"https://api.github.com/repos/src-d/lookout/forks","keys_url":"https://api.github.com/repos/src-d/lookout/keys{/key_id}","collaborators_url":"https://api.github.com/repos/src-d/lookout/collaborators{/collaborator}","teams_url":"https://api.github.com/repos/src-d/lookout/teams","hooks_url":"https://api.github.com/repos/src-d/lookout/hooks","issue_events_url":"https://api.github.com/repos/src-d/lookout/issues/events{/number}","events_url":"https://api.github.com/repos/src-d/lookout/events","assignees_url":"https://api.github.com/repos/src-d/lookout/assignees{/user}","branches_url":"https://api.github.com/repos/src-d/lookout/branches{/branch}","tags_url":"https://api.github.com/repos/src-d/lookout/tags","blobs_url":"https://api.github.com/repos/src-d/lookout/git/blobs{/sha}","git_tags_url":"https://api.github.com/repos/src-d/lookout/git/tags{/sha}","git_refs_url":"https://api.github.com/repos/src-d/lookout/git/refs{/sha}","trees_url":"https://api.github.com/repos/src-d/lookout/git/trees{/sha}","statuses_url":"https://api.github.com/repos/src-d/lookout/statuses/{sha}","languages_url":"https://api.github.com/repos/src-d/lookout/languages","stargazers_url":"https://api.github.com/repos/src-d/lookout/stargazers","contributors_url":"https://api.github.com/repos/src-d/lookout/contributors","subscribers_url":"https://api.github.com/repos/src-d/lookout/subscribers","subscription_url":"https://api.github.com/repos/src-d/lookout/subscription","commits_url":"https://api.github.com/repos/src-d/lookout/commits{/sha}","git_commits_url":"https://api.github.com/repos/src-d/lookout/git/commits{/sha}","comments_url":"https://api.github.com/repos/src-d/lookout/comments{/number}","issue_comment_url":"https://api.github.com/repos/src-d/lookout/issues/comments{/number}","contents_url":"https://api.github.com/repos/src-d/lookout/contents/{+path}","compare_url":"https://api.github.com/repos/src-d/lookout/compare/{base}...{head}","merges_url":"https://api.github.com/repos/src-d/lookout/merges","archive_url":"https://api.github.com/repos/src-d/lookout/{archive_format}{/ref}","downloads_url":"https://api.github.com/repos/src-d/lookout/downloads","issues_url":"https://api.github.com/repos/src-d/lookout/issues{/number}","pulls_url":"https://api.github.com/repos/src-d/lookout/pulls{/number}","milestones_url":"https://api.github.com/repos/src-d/lookout/milestones{/number}","notifications_url":"https://api.github.com/repos/src-d/lookout/notifications{?since,all,participating}","labels_url":"https://api.github.com/repos/src-d/lookout/labels{/name}","releases_url":"https://api.github.com/repos/src-d/lookout/releases{/id}","deployments_url":"https://api.github.com/repos/src-d/lookout/deployments","created_at":"2018-06-05T08:37:23Z","updated_at":"2025-10-05T17:39:33Z","pushed_at":"2021-08-03T19:18:36Z","git_url":"git://github.com/src-d/lookout.git","ssh_url":"git@github.com:src-d/lookout.git","clone_url":"https://github.com/src-d/lookout.git","svn_url":"https://github.com/src-d/lookout","homepage":"https://docs.sourced.tech/lookout","size":60130,"stargazers_count":152,"watchers_count":152,"language":"Go","has_issues":true,"has_projects":false,"has_downloads":true,"has_wiki":false,"has_pages":false,"has_discussions":false,"forks_count":33,"mirror_url":null,"archived":false,"disabled":false,"open_issues_count":84,"license":{"key":"agpl-3.0","name":"GNU Affero General Public License v3.0","spdx_id":"AGPL-3.0","url":"https://api.github.com/licenses/agpl-3.0","node_id":"MDc6TGljZW5zZTE="},"allow_forking":true,"is_template":false,"web_commit_signoff_required":false,"has_pull_requests":true,"pull_request_creation_policy":"all","topics":["code-review","github","lookout"],"visibility":"public","forks":33,"open_issues":84,"watchers":152,"default_branch":"master"}},"_links":{"self":{"href":"https://api.github.com/repos/src-d/lookout/pulls/813"},"html":{"href":"https://github.com/src-d/lookout/pull/813"},"issue":{"href":"https://api.github.com/repos/src-d/lookout/issues/813"},"comments":{"href":"https://api.github.com/repos/src-d/lookout/issues/813/comments"},"review_comments":{"href":"https://api.github.com/repos/src-d/lookout/pulls/813/comments"},"review_comment":{"href":"https://api.github.com/repos/src-d/lookout/pulls/comments{/number}"},"commits":{"href":"https://api.github.com/repos/src-d/lookout/pulls/813/commits"},"statuses":{"href":"https://api.github.com/repos/src-d/lookout/statuses/bc7d601dc984aad8ca550abef171233cf733ad88"}},"author_association":"NONE","auto_merge":null,"assignee":null,"active_lock_reason":null},{"url":"https://api.github.com/repos/src-d/lookout/pulls/812","id":626419988,"node_id":"MDExOlB1bGxSZXF1ZXN0NjI2NDE5OTg4","html_url":"https://github.com/src-d/lookout/pull/812","diff_url":"https://github.com/src-d/lookout/pull/812.diff","patch_url":"https://github.com/src-d/lookout/pull/812.patch","issue_url":"https://api.github.com/repos/src-d/lookout/issues/812","number":812,"state":"open","locked":false,"title":"Upgrade to GitHub-native Dependabot","user":{"login":"dependabot-preview[bot]","id":27856297,"node_id":"MDM6Qm90Mjc4NTYyOTc=","avatar_url":"https://avatars.githubusercontent.com/in/2141?v=4","gravatar_id":"","url":"https://api.github.com/users/dependabot-preview%5Bbot%5D","html_url":"https://github.com/apps/dependabot-preview","followers_url":"https://api.github.com/users/dependabot-preview%5Bbot%5D/followers","following_url":"https://api.github.com/users/dependabot-preview%5Bbot%5D/following{/other_user}","gists_url":"https://api.github.com/users/dependabot-preview%5Bbot%5D/gists{/gist_id}","starred_url":"https://api.github.com/users/dependabot-preview%5Bbot%5D/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/dependabot-preview%5Bbot%5D/subscriptions","organizations_url":"https://api.github.com/users/dependabot-preview%5Bbot%5D/orgs","repos_url":"https://api.github.com/users/dependabot-preview%5Bbot%5D/repos","events_url":"https://api.github.com/users/dependabot-preview%5Bbot%5D/events{/privacy}","received_events_url":"https://api.github.com/users/dependabot-preview%5Bbot%5D/received_events","type":"Bot","user_view_type":"public","site_admin":false},"body":"_Dependabot Preview will be shut down on August 3rd, 2021. In order to keep getting Dependabot updates, please merge this PR and migrate to GitHub-native Dependabot before then._\n\nDependabot has been fully integrated into GitHub, so you no longer have to install and manage a separate app. This pull request migrates your configuration from Dependabot.com to a config file, using the [new syntax][new_syntax]. When merged, we'll swap out `dependabot-preview` (me) for a new `dependabot` app, and you'll be all set!\n\nWith this change, you'll now use the [Dependabot page in GitHub][dependabot_page], rather than the [Dependabot dashboard][dashboard], to monitor your version updates, and you'll configure Dependabot through the new config file rather than a UI.\n\n\n\n\n\n\n\nIf you've got any questions or feedback for us, please let us know by creating an issue in the [dependabot/dependabot-core][issues] repository.\n\n[Learn more about migrating to GitHub-native Dependabot][learn]\n\nPlease note that regular `@dependabot` commands do not work on this pull request.\n\n[dashboard]: https://app.dependabot.com/\n[dependabot_page]: https://github.com/src-d/lookout/network/updates\n[issues]: https://github.com/dependabot/dependabot-core/issues/new?assignees=%40dependabot%2Fpreview-migration-reviewers&labels=E%3A+preview-migration&template=migration-issue.md\n[learn]: http://docs.github.com/code-security/supply-chain-security/upgrading-from-dependabotcom-to-github-native-dependabot\n[new_syntax]: https://help.github.com/en/github/administering-a-repository/configuration-options-for-dependency-updates\n[org_secrets_url]: https://github.com/organizations/src-d/settings/secrets/dependabot\n[repo_secrets_url]: https://github.com/src-d/lookout/settings/secrets/dependabot\n","created_at":"2021-04-29T19:27:10Z","updated_at":"2021-06-25T15:18:02Z","closed_at":null,"merged_at":null,"merge_commit_sha":"2251f2c1b60d92a4ee61cd3fd2f317a28f39b780","assignees":[],"requested_reviewers":[],"requested_teams":[],"labels":[{"id":1224325914,"node_id":"MDU6TGFiZWwxMjI0MzI1OTE0","url":"https://api.github.com/repos/src-d/lookout/labels/dependencies","name":"dependencies","color":"0025ff","default":false,"description":"Pull requests that update a dependency file"}],"milestone":null,"draft":false,"commits_url":"https://api.github.com/repos/src-d/lookout/pulls/812/commits","review_comments_url":"https://api.github.com/repos/src-d/lookout/pulls/812/comments","review_comment_url":"https://api.github.com/repos/src-d/lookout/pulls/comments{/number}","comments_url":"https://api.github.com/repos/src-d/lookout/issues/812/comments","statuses_url":"https://api.github.com/repos/src-d/lookout/statuses/13accd532cf85a062d01bdbaf258442f10bdf1d5","head":{"label":"src-d:dependabot/add-v2-config-file","ref":"dependabot/add-v2-config-file","sha":"13accd532cf85a062d01bdbaf258442f10bdf1d5","user":{"login":"src-d","id":15128793,"node_id":"MDEyOk9yZ2FuaXphdGlvbjE1MTI4Nzkz","avatar_url":"https://avatars.githubusercontent.com/u/15128793?v=4","gravatar_id":"","url":"https://api.github.com/users/src-d","html_url":"https://github.com/src-d","followers_url":"https://api.github.com/users/src-d/followers","following_url":"https://api.github.com/users/src-d/following{/other_user}","gists_url":"https://api.github.com/users/src-d/gists{/gist_id}","starred_url":"https://api.github.com/users/src-d/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/src-d/subscriptions","organizations_url":"https://api.github.com/users/src-d/orgs","repos_url":"https://api.github.com/users/src-d/repos","events_url":"https://api.github.com/users/src-d/events{/privacy}","received_events_url":"https://api.github.com/users/src-d/received_events","type":"Organization","user_view_type":"public","site_admin":false},"repo":{"id":136146572,"node_id":"MDEwOlJlcG9zaXRvcnkxMzYxNDY1NzI=","name":"lookout","full_name":"src-d/lookout","private":false,"owner":{"login":"src-d","id":15128793,"node_id":"MDEyOk9yZ2FuaXphdGlvbjE1MTI4Nzkz","avatar_url":"https://avatars.githubusercontent.com/u/15128793?v=4","gravatar_id":"","url":"https://api.github.com/users/src-d","html_url":"https://github.com/src-d","followers_url":"https://api.github.com/users/src-d/followers","following_url":"https://api.github.com/users/src-d/following{/other_user}","gists_url":"https://api.github.com/users/src-d/gists{/gist_id}","starred_url":"https://api.github.com/users/src-d/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/src-d/subscriptions","organizations_url":"https://api.github.com/users/src-d/orgs","repos_url":"https://api.github.com/users/src-d/repos","events_url":"https://api.github.com/users/src-d/events{/privacy}","received_events_url":"https://api.github.com/users/src-d/received_events","type":"Organization","user_view_type":"public","site_admin":false},"html_url":"https://github.com/src-d/lookout","description":"Assisted code review, running custom code analyzers on pull requests","fork":false,"url":"https://api.github.com/repos/src-d/lookout","forks_url":"https://api.github.com/repos/src-d/lookout/forks","keys_url":"https://api.github.com/repos/src-d/lookout/keys{/key_id}","collaborators_url":"https://api.github.com/repos/src-d/lookout/collaborators{/collaborator}","teams_url":"https://api.github.com/repos/src-d/lookout/teams","hooks_url":"https://api.github.com/repos/src-d/lookout/hooks","issue_events_url":"https://api.github.com/repos/src-d/lookout/issues/events{/number}","events_url":"https://api.github.com/repos/src-d/lookout/events","assignees_url":"https://api.github.com/repos/src-d/lookout/assignees{/user}","branches_url":"https://api.github.com/repos/src-d/lookout/branches{/branch}","tags_url":"https://api.github.com/repos/src-d/lookout/tags","blobs_url":"https://api.github.com/repos/src-d/lookout/git/blobs{/sha}","git_tags_url":"https://api.github.com/repos/src-d/lookout/git/tags{/sha}","git_refs_url":"https://api.github.com/repos/src-d/lookout/git/refs{/sha}","trees_url":"https://api.github.com/repos/src-d/lookout/git/trees{/sha}","statuses_url":"https://api.github.com/repos/src-d/lookout/statuses/{sha}","languages_url":"https://api.github.com/repos/src-d/lookout/languages","stargazers_url":"https://api.github.com/repos/src-d/lookout/stargazers","contributors_url":"https://api.github.com/repos/src-d/lookout/contributors","subscribers_url":"https://api.github.com/repos/src-d/lookout/subscribers","subscription_url":"https://api.github.com/repos/src-d/lookout/subscription","commits_url":"https://api.github.com/repos/src-d/lookout/commits{/sha}","git_commits_url":"https://api.github.com/repos/src-d/lookout/git/commits{/sha}","comments_url":"https://api.github.com/repos/src-d/lookout/comments{/number}","issue_comment_url":"https://api.github.com/repos/src-d/lookout/issues/comments{/number}","contents_url":"https://api.github.com/repos/src-d/lookout/contents/{+path}","compare_url":"https://api.github.com/repos/src-d/lookout/compare/{base}...{head}","merges_url":"https://api.github.com/repos/src-d/lookout/merges","archive_url":"https://api.github.com/repos/src-d/lookout/{archive_format}{/ref}","downloads_url":"https://api.github.com/repos/src-d/lookout/downloads","issues_url":"https://api.github.com/repos/src-d/lookout/issues{/number}","pulls_url":"https://api.github.com/repos/src-d/lookout/pulls{/number}","milestones_url":"https://api.github.com/repos/src-d/lookout/milestones{/number}","notifications_url":"https://api.github.com/repos/src-d/lookout/notifications{?since,all,participating}","labels_url":"https://api.github.com/repos/src-d/lookout/labels{/name}","releases_url":"https://api.github.com/repos/src-d/lookout/releases{/id}","deployments_url":"https://api.github.com/repos/src-d/lookout/deployments","created_at":"2018-06-05T08:37:23Z","updated_at":"2025-10-05T17:39:33Z","pushed_at":"2021-08-03T19:18:36Z","git_url":"git://github.com/src-d/lookout.git","ssh_url":"git@github.com:src-d/lookout.git","clone_url":"https://github.com/src-d/lookout.git","svn_url":"https://github.com/src-d/lookout","homepage":"https://docs.sourced.tech/lookout","size":60130,"stargazers_count":152,"watchers_count":152,"language":"Go","has_issues":true,"has_projects":false,"has_downloads":true,"has_wiki":false,"has_pages":false,"has_discussions":false,"forks_count":33,"mirror_url":null,"archived":false,"disabled":false,"open_issues_count":84,"license":{"key":"agpl-3.0","name":"GNU Affero General Public License v3.0","spdx_id":"AGPL-3.0","url":"https://api.github.com/licenses/agpl-3.0","node_id":"MDc6TGljZW5zZTE="},"allow_forking":true,"is_template":false,"web_commit_signoff_required":false,"has_pull_requests":true,"pull_request_creation_policy":"all","topics":["code-review","github","lookout"],"visibility":"public","forks":33,"open_issues":84,"watchers":152,"default_branch":"master"}},"base":{"label":"src-d:master","ref":"master","sha":"d5cccd9aed531327965c374533f42e0469af4cda","user":{"login":"src-d","id":15128793,"node_id":"MDEyOk9yZ2FuaXphdGlvbjE1MTI4Nzkz","avatar_url":"https://avatars.githubusercontent.com/u/15128793?v=4","gravatar_id":"","url":"https://api.github.com/users/src-d","html_url":"https://github.com/src-d","followers_url":"https://api.github.com/users/src-d/followers","following_url":"https://api.github.com/users/src-d/following{/other_user}","gists_url":"https://api.github.com/users/src-d/gists{/gist_id}","starred_url":"https://api.github.com/users/src-d/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/src-d/subscriptions","organizations_url":"https://api.github.com/users/src-d/orgs","repos_url":"https://api.github.com/users/src-d/repos","events_url":"https://api.github.com/users/src-d/events{/privacy}","received_events_url":"https://api.github.com/users/src-d/received_events","type":"Organization","user_view_type":"public","site_admin":false},"repo":{"id":136146572,"node_id":"MDEwOlJlcG9zaXRvcnkxMzYxNDY1NzI=","name":"lookout","full_name":"src-d/lookout","private":false,"owner":{"login":"src-d","id":15128793,"node_id":"MDEyOk9yZ2FuaXphdGlvbjE1MTI4Nzkz","avatar_url":"https://avatars.githubusercontent.com/u/15128793?v=4","gravatar_id":"","url":"https://api.github.com/users/src-d","html_url":"https://github.com/src-d","followers_url":"https://api.github.com/users/src-d/followers","following_url":"https://api.github.com/users/src-d/following{/other_user}","gists_url":"https://api.github.com/users/src-d/gists{/gist_id}","starred_url":"https://api.github.com/users/src-d/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/src-d/subscriptions","organizations_url":"https://api.github.com/users/src-d/orgs","repos_url":"https://api.github.com/users/src-d/repos","events_url":"https://api.github.com/users/src-d/events{/privacy}","received_events_url":"https://api.github.com/users/src-d/received_events","type":"Organization","user_view_type":"public","site_admin":false},"html_url":"https://github.com/src-d/lookout","description":"Assisted code review, running custom code analyzers on pull requests","fork":false,"url":"https://api.github.com/repos/src-d/lookout","forks_url":"https://api.github.com/repos/src-d/lookout/forks","keys_url":"https://api.github.com/repos/src-d/lookout/keys{/key_id}","collaborators_url":"https://api.github.com/repos/src-d/lookout/collaborators{/collaborator}","teams_url":"https://api.github.com/repos/src-d/lookout/teams","hooks_url":"https://api.github.com/repos/src-d/lookout/hooks","issue_events_url":"https://api.github.com/repos/src-d/lookout/issues/events{/number}","events_url":"https://api.github.com/repos/src-d/lookout/events","assignees_url":"https://api.github.com/repos/src-d/lookout/assignees{/user}","branches_url":"https://api.github.com/repos/src-d/lookout/branches{/branch}","tags_url":"https://api.github.com/repos/src-d/lookout/tags","blobs_url":"https://api.github.com/repos/src-d/lookout/git/blobs{/sha}","git_tags_url":"https://api.github.com/repos/src-d/lookout/git/tags{/sha}","git_refs_url":"https://api.github.com/repos/src-d/lookout/git/refs{/sha}","trees_url":"https://api.github.com/repos/src-d/lookout/git/trees{/sha}","statuses_url":"https://api.github.com/repos/src-d/lookout/statuses/{sha}","languages_url":"https://api.github.com/repos/src-d/lookout/languages","stargazers_url":"https://api.github.com/repos/src-d/lookout/stargazers","contributors_url":"https://api.github.com/repos/src-d/lookout/contributors","subscribers_url":"https://api.github.com/repos/src-d/lookout/subscribers","subscription_url":"https://api.github.com/repos/src-d/lookout/subscription","commits_url":"https://api.github.com/repos/src-d/lookout/commits{/sha}","git_commits_url":"https://api.github.com/repos/src-d/lookout/git/commits{/sha}","comments_url":"https://api.github.com/repos/src-d/lookout/comments{/number}","issue_comment_url":"https://api.github.com/repos/src-d/lookout/issues/comments{/number}","contents_url":"https://api.github.com/repos/src-d/lookout/contents/{+path}","compare_url":"https://api.github.com/repos/src-d/lookout/compare/{base}...{head}","merges_url":"https://api.github.com/repos/src-d/lookout/merges","archive_url":"https://api.github.com/repos/src-d/lookout/{archive_format}{/ref}","downloads_url":"https://api.github.com/repos/src-d/lookout/downloads","issues_url":"https://api.github.com/repos/src-d/lookout/issues{/number}","pulls_url":"https://api.github.com/repos/src-d/lookout/pulls{/number}","milestones_url":"https://api.github.com/repos/src-d/lookout/milestones{/number}","notifications_url":"https://api.github.com/repos/src-d/lookout/notifications{?since,all,participating}","labels_url":"https://api.github.com/repos/src-d/lookout/labels{/name}","releases_url":"https://api.github.com/repos/src-d/lookout/releases{/id}","deployments_url":"https://api.github.com/repos/src-d/lookout/deployments","created_at":"2018-06-05T08:37:23Z","updated_at":"2025-10-05T17:39:33Z","pushed_at":"2021-08-03T19:18:36Z","git_url":"git://github.com/src-d/lookout.git","ssh_url":"git@github.com:src-d/lookout.git","clone_url":"https://github.com/src-d/lookout.git","svn_url":"https://github.com/src-d/lookout","homepage":"https://docs.sourced.tech/lookout","size":60130,"stargazers_count":152,"watchers_count":152,"language":"Go","has_issues":true,"has_projects":false,"has_downloads":true,"has_wiki":false,"has_pages":false,"has_discussions":false,"forks_count":33,"mirror_url":null,"archived":false,"disabled":false,"open_issues_count":84,"license":{"key":"agpl-3.0","name":"GNU Affero General Public License v3.0","spdx_id":"AGPL-3.0","url":"https://api.github.com/licenses/agpl-3.0","node_id":"MDc6TGljZW5zZTE="},"allow_forking":true,"is_template":false,"web_commit_signoff_required":false,"has_pull_requests":true,"pull_request_creation_policy":"all","topics":["code-review","github","lookout"],"visibility":"public","forks":33,"open_issues":84,"watchers":152,"default_branch":"master"}},"_links":{"self":{"href":"https://api.github.com/repos/src-d/lookout/pulls/812"},"html":{"href":"https://github.com/src-d/lookout/pull/812"},"issue":{"href":"https://api.github.com/repos/src-d/lookout/issues/812"},"comments":{"href":"https://api.github.com/repos/src-d/lookout/issues/812/comments"},"review_comments":{"href":"https://api.github.com/repos/src-d/lookout/pulls/812/comments"},"review_comment":{"href":"https://api.github.com/repos/src-d/lookout/pulls/comments{/number}"},"commits":{"href":"https://api.github.com/repos/src-d/lookout/pulls/812/commits"},"statuses":{"href":"https://api.github.com/repos/src-d/lookout/statuses/13accd532cf85a062d01bdbaf258442f10bdf1d5"}},"author_association":"NONE","auto_merge":null,"assignee":null,"active_lock_reason":null},{"url":"https://api.github.com/repos/src-d/lookout/pulls/811","id":617142853,"node_id":"MDExOlB1bGxSZXF1ZXN0NjE3MTQyODUz","html_url":"https://github.com/src-d/lookout/pull/811","diff_url":"https://github.com/src-d/lookout/pull/811.diff","patch_url":"https://github.com/src-d/lookout/pull/811.patch","issue_url":"https://api.github.com/repos/src-d/lookout/issues/811","number":811,"state":"open","locked":false,"title":"[Security] Bump ssri from 6.0.1 to 6.0.2 in /frontend","user":{"login":"dependabot-preview[bot]","id":27856297,"node_id":"MDM6Qm90Mjc4NTYyOTc=","avatar_url":"https://avatars.githubusercontent.com/in/2141?v=4","gravatar_id":"","url":"https://api.github.com/users/dependabot-preview%5Bbot%5D","html_url":"https://github.com/apps/dependabot-preview","followers_url":"https://api.github.com/users/dependabot-preview%5Bbot%5D/followers","following_url":"https://api.github.com/users/dependabot-preview%5Bbot%5D/following{/other_user}","gists_url":"https://api.github.com/users/dependabot-preview%5Bbot%5D/gists{/gist_id}","starred_url":"https://api.github.com/users/dependabot-preview%5Bbot%5D/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/dependabot-preview%5Bbot%5D/subscriptions","organizations_url":"https://api.github.com/users/dependabot-preview%5Bbot%5D/orgs","repos_url":"https://api.github.com/users/dependabot-preview%5Bbot%5D/repos","events_url":"https://api.github.com/users/dependabot-preview%5Bbot%5D/events{/privacy}","received_events_url":"https://api.github.com/users/dependabot-preview%5Bbot%5D/received_events","type":"Bot","user_view_type":"public","site_admin":false},"body":"Bumps [ssri](https://github.com/npm/ssri) from 6.0.1 to 6.0.2. **This update includes a security fix.**\n<details>\n<summary>Vulnerabilities fixed</summary>\n<p><em>Sourced from <a href=\"https://github.com/advisories/GHSA-vx3p-948g-6vhq\">The GitHub Security Advisory Database</a>.</em></p>\n<blockquote>\n<p><strong>Regular Expression Denial of Service (ReDoS)</strong>\nnpm <code>ssri</code> 5.2.2-6.0.1 and 7.0.0-8.0.0, processes SRIs using a regular expression which is vulnerable to a denial of service. Malicious SRIs could take an extremely long time to process, leading to denial of service. This issue only affects consumers using the strict option.</p>\n<p>Affected versions: &gt;= 5.2.2 &lt; 6.0.2</p>\n</blockquote>\n</details>\n<details>\n<summary>Changelog</summary>\n<p><em>Sourced from <a href=\"https://github.com/npm/ssri/blob/v6.0.2/CHANGELOG.md\">ssri's changelog</a>.</em></p>\n<blockquote>\n<h2><a href=\"https://github.com/zkat/ssri/compare/v6.0.1...v6.0.2\">6.0.2</a> (2021-04-07)</h2>\n<h3>Bug Fixes</h3>\n<ul>\n<li>backport regex change from 8.0.1 (<a href=\"https://github.com/zkat/ssri/commit/b30dfdb\">b30dfdb</a>), closes <a href=\"https://github-redirect.dependabot.com/zkat/ssri/issues/19\">#19</a></li>\n</ul>\n<p><!-- raw HTML omitted --><!-- raw HTML omitted --></p>\n</blockquote>\n</details>\n<details>\n<summary>Commits</summary>\n<ul>\n<li><a href=\"https://github.com/npm/ssri/commit/b7c8c7c61db89aeb9fbf7596c0ef17071bc216ef\"><code>b7c8c7c</code></a> chore(release): 6.0.2</li>\n<li><a href=\"https://github.com/npm/ssri/commit/b30dfdb00bb94ddc49a25a85a18fb27afafdfbb1\"><code>b30dfdb</code></a> fix: backport regex change from 8.0.1</li>\n<li>See full diff in <a href=\"https://github.com/npm/ssri/compare/v6.0.1...v6.0.2\">compare view</a></li>\n</ul>\n</details>\n<details>\n<summary>Maintainer changes</summary>\n<p>This version was pushed to npm by <a href=\"https://www.npmjs.com/~nlf\">nlf</a>, a new releaser for ssri since your current version.</p>\n</details>\n<br />\n\n\n[![Dependabot compatibility score](https://api.dependabot.com/badges/compatibility_score?dependency-name=ssri&package-manager=npm_and_yarn&previous-version=6.0.1&new-version=6.0.2)](https://dependabot.com/compatibility-score/?dependency-name=ssri&package-manager=npm_and_yarn&previous-version=6.0.1&new-version=6.0.2)\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n<details>\n<summary>Dependabot commands and options</summary>\n<br />\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot merge` will merge this PR after your CI passes on it\n- `@dependabot squash and merge` will squash and merge this PR after your CI passes on it\n- `@dependabot cancel merge` will cancel a previously requested merge and block automerging\n- `@dependabot reopen` will reopen this PR if it is closed\n- `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually\n- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot use these labels` will set the current labels as the default for future PRs for this repo and language\n- `@dependabot use these reviewers` will set the current reviewers as the default for future PRs for this repo and language\n- `@dependabot use these assignees` will set the current assignees as the default for future PRs for this repo and language\n- `@dependabot use this milestone` will set the current milestone as the default for future PRs for this repo and language\n- `@dependabot badge me` will comment on this PR with code to add a \"Dependabot enabled\" badge to your readme\n\nAdditionally, you can set the following in your Dependabot [dashboard](https://app.dependabot.com):\n- Update frequency (including time of day and day of week)\n- Pull request limits (per update run and/or open at any time)\n- Automerge options (never/patch/minor, and dev/runtime dependencies)\n- Out-of-range updates (receive only lockfile updates, if desired)\n- Security updates (receive only security updates, if desired)\n\n\n\n</details>","created_at":"2021-04-16T21:51:31Z","updated_at":"2021-04-16T21:51:32Z","closed_at":null,"merged_at":null,"merge_commit_sha":"489286777a57211c0bade7f3f518203c46fbffbc","assignees":[],"requested_reviewers":[],"requested_teams":[],"labels":[{"id":1224325914,"node_id":"MDU6TGFiZWwxMjI0MzI1OTE0","url":"https://api.github.com/repos/src-d/lookout/labels/dependencies","name":"dependencies","color":"0025ff","default":false,"description":"Pull requests that update a dependency file"},{"id":1225416698,"node_id":"MDU6TGFiZWwxMjI1NDE2Njk4","url":"https://api.github.com/repos/src-d/lookout/labels/javascript","name":"javascript","color":"168700","default":false,"description":"Pull requests that update Javascript code"},{"id":1445656551,"node_id":"MDU6TGFiZWwxNDQ1NjU2NTUx","url":"https://api.github.com/repos/src-d/lookout/labels/security","name":"security","color":"ee0701","default":false,"description":"Pull requests that address a security vulnerability"}],"milestone":null,"draft":false,"commits_url":"https://api.github.com/repos/src-d/lookout/pulls/811/commits","review_comments_url":"https://api.github.com/repos/src-d/lookout/pulls/811/comments","review_comment_url":"https://api.github.com/repos/src-d/lookout/pulls/comments{/number}","comments_url":"https://api.github.com/repos/src-d/lookout/issues/811/comments","statuses_url":"https://api.github.com/repos/src-d/lookout/statuses/50ade8490a1b6bbf07adbc7ae9fa6ab5fa9f76f1","head":{"label":"src-d:dependabot/npm_and_yarn/frontend/ssri-6.0.2","ref":"dependabot/npm_and_yarn/frontend/ssri-6.0.2","sha":"50ade8490a1b6bbf07adbc7ae9fa6ab5fa9f76f1","user":{"login":"src-d","id":15128793,"node_id":"MDEyOk9yZ2FuaXphdGlvbjE1MTI4Nzkz","avatar_url":"https://avatars.githubusercontent.com/u/15128793?v=4","gravatar_id":"","url":"https://api.github.com/users/src-d","html_url":"https://github.com/src-d","followers_url":"https://api.github.com/users/src-d/followers","following_url":"https://api.github.com/users/src-d/following{/other_user}","gists_url":"https://api.github.com/users/src-d/gists{/gist_id}","starred_url":"https://api.github.com/users/src-d/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/src-d/subscriptions","organizations_url":"https://api.github.com/users/src-d/orgs","repos_url":"https://api.github.com/users/src-d/repos","events_url":"https://api.github.com/users/src-d/events{/privacy}","received_events_url":"https://api.github.com/users/src-d/received_events","type":"Organization","user_view_type":"public","site_admin":false},"repo":{"id":136146572,"node_id":"MDEwOlJlcG9zaXRvcnkxMzYxNDY1NzI=","name":"lookout","full_name":"src-d/lookout","private":false,"owner":{"login":"src-d","id":15128793,"node_id":"MDEyOk9yZ2FuaXphdGlvbjE1MTI4Nzkz","avatar_url":"https://avatars.githubusercontent.com/u/15128793?v=4","gravatar_id":"","url":"https://api.github.com/users/src-d","html_url":"https://github.com/src-d","followers_url":"https://api.github.com/users/src-d/followers","following_url":"https://api.github.com/users/src-d/following{/other_user}","gists_url":"https://api.github.com/users/src-d/gists{/gist_id}","starred_url":"https://api.github.com/users/src-d/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/src-d/subscriptions","organizations_url":"https://api.github.com/users/src-d/orgs","repos_url":"https://api.github.com/users/src-d/repos","events_url":"https://api.github.com/users/src-d/events{/privacy}","received_events_url":"https://api.github.com/users/src-d/received_events","type":"Organization","user_view_type":"public","site_admin":false},"html_url":"https://github.com/src-d/lookout","description":"Assisted code review, running custom code analyzers on pull requests","fork":false,"url":"https://api.github.com/repos/src-d/lookout","forks_url":"https://api.github.com/repos/src-d/lookout/forks","keys_url":"https://api.github.com/repos/src-d/lookout/keys{/key_id}","collaborators_url":"https://api.github.com/repos/src-d/lookout/collaborators{/collaborator}","teams_url":"https://api.github.com/repos/src-d/lookout/teams","hooks_url":"https://api.github.com/repos/src-d/lookout/hooks","issue_events_url":"https://api.github.com/repos/src-d/lookout/issues/events{/number}","events_url":"https://api.github.com/repos/src-d/lookout/events","assignees_url":"https://api.github.com/repos/src-d/lookout/assignees{/user}","branches_url":"https://api.github.com/repos/src-d/lookout/branches{/branch}","tags_url":"https://api.github.com/repos/src-d/lookout/tags","blobs_url":"https://api.github.com/repos/src-d/lookout/git/blobs{/sha}","git_tags_url":"https://api.github.com/repos/src-d/lookout/git/tags{/sha}","git_refs_url":"https://api.github.com/repos/src-d/lookout/git/refs{/sha}","trees_url":"https://api.github.com/repos/src-d/lookout/git/trees{/sha}","statuses_url":"https://api.github.com/repos/src-d/lookout/statuses/{sha}","languages_url":"https://api.github.com/repos/src-d/lookout/languages","stargazers_url":"https://api.github.com/repos/src-d/lookout/stargazers","contributors_url":"https://api.github.com/repos/src-d/lookout/contributors","subscribers_url":"https://api.github.com/repos/src-d/lookout/subscribers","subscription_url":"https://api.github.com/repos/src-d/lookout/subscription","commits_url":"https://api.github.com/repos/src-d/lookout/commits{/sha}","git_commits_url":"https://api.github.com/repos/src-d/lookout/git/commits{/sha}","comments_url":"https://api.github.com/repos/src-d/lookout/comments{/number}","issue_comment_url":"https://api.github.com/repos/src-d/lookout/issues/comments{/number}","contents_url":"https://api.github.com/repos/src-d/lookout/contents/{+path}","compare_url":"https://api.github.com/repos/src-d/lookout/compare/{base}...{head}","merges_url":"https://api.github.com/repos/src-d/lookout/merges","archive_url":"https://api.github.com/repos/src-d/lookout/{archive_format}{/ref}","downloads_url":"https://api.github.com/repos/src-d/lookout/downloads","issues_url":"https://api.github.com/repos/src-d/lookout/issues{/number}","pulls_url":"https://api.github.com/repos/src-d/lookout/pulls{/number}","milestones_url":"https://api.github.com/repos/src-d/lookout/milestones{/number}","notifications_url":"https://api.github.com/repos/src-d/lookout/notifications{?since,all,participating}","labels_url":"https://api.github.com/repos/src-d/lookout/labels{/name}","releases_url":"https://api.github.com/repos/src-d/lookout/releases{/id}","deployments_url":"https://api.github.com/repos/src-d/lookout/deployments","created_at":"2018-06-05T08:37:23Z","updated_at":"2025-10-05T17:39:33Z","pushed_at":"2021-08-03T19:18:36Z","git_url":"git://github.com/src-d/lookout.git","ssh_url":"git@github.com:src-d/lookout.git","clone_url":"https://github.com/src-d/lookout.git","svn_url":"https://github.com/src-d/lookout","homepage":"https://docs.sourced.tech/lookout","size":60130,"stargazers_count":152,"watchers_count":152,"language":"Go","has_issues":true,"has_projects":false,"has_downloads":true,"has_wiki":false,"has_pages":false,"has_discussions":false,"forks_count":33,"mirror_url":null,"archived":false,"disabled":false,"open_issues_count":84,"license":{"key":"agpl-3.0","name":"GNU Affero General Public License v3.0","spdx_id":"AGPL-3.0","url":"https://api.github.com/licenses/agpl-3.0","node_id":"MDc6TGljZW5zZTE="},"allow_forking":true,"is_template":false,"web_commit_signoff_required":false,"has_pull_requests":true,"pull_request_creation_policy":"all","topics":["code-review","github","lookout"],"visibility":"public","forks":33,"open_issues":84,"watchers":152,"default_branch":"master"}},"base":{"label":"src-d:master","ref":"master","sha":"d5cccd9aed531327965c374533f42e0469af4cda","user":{"login":"src-d","id":15128793,"node_id":"MDEyOk9yZ2FuaXphdGlvbjE1MTI4Nzkz","avatar_url":"https://avatars.githubusercontent.com/u/15128793?v=4","gravatar_id":"","url":"https://api.github.com/users/src-d","html_url":"https://github.com/src-d","followers_url":"https://api.github.com/users/src-d/followers","following_url":"https://api.github.com/users/src-d/following{/other_user}","gists_url":"https://api.github.com/users/src-d/gists{/gist_id}","starred_url":"https://api.github.com/users/src-d/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/src-d/subscriptions","organizations_url":"https://api.github.com/users/src-d/orgs","repos_url":"https://api.github.com/users/src-d/repos","events_url":"https://api.github.com/users/src-d/events{/privacy}","received_events_url":"https://api.github.com/users/src-d/received_events","type":"Organization","user_view_type":"public","site_admin":false},"repo":{"id":136146572,"node_id":"MDEwOlJlcG9zaXRvcnkxMzYxNDY1NzI=","name":"lookout","full_name":"src-d/lookout","private":false,"owner":{"login":"src-d","id":15128793,"node_id":"MDEyOk9yZ2FuaXphdGlvbjE1MTI4Nzkz","avatar_url":"https://avatars.githubusercontent.com/u/15128793?v=4","gravatar_id":"","url":"https://api.github.com/users/src-d","html_url":"https://github.com/src-d","followers_url":"https://api.github.com/users/src-d/followers","following_url":"https://api.github.com/users/src-d/following{/other_user}","gists_url":"https://api.github.com/users/src-d/gists{/gist_id}","starred_url":"https://api.github.com/users/src-d/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/src-d/subscriptions","organizations_url":"https://api.github.com/users/src-d/orgs","repos_url":"https://api.github.com/users/src-d/repos","events_url":"https://api.github.com/users/src-d/events{/privacy}","received_events_url":"https://api.github.com/users/src-d/received_events","type":"Organization","user_view_type":"public","site_admin":false},"html_url":"https://github.com/src-d/lookout","description":"Assisted code review, running custom code analyzers on pull requests","fork":false,"url":"https://api.github.com/repos/src-d/lookout","forks_url":"https://api.github.com/repos/src-d/lookout/forks","keys_url":"https://api.github.com/repos/src-d/lookout/keys{/key_id}","collaborators_url":"https://api.github.com/repos/src-d/lookout/collaborators{/collaborator}","teams_url":"https://api.github.com/repos/src-d/lookout/teams","hooks_url":"https://api.github.com/repos/src-d/lookout/hooks","issue_events_url":"https://api.github.com/repos/src-d/lookout/issues/events{/number}","events_url":"https://api.github.com/repos/src-d/lookout/events","assignees_url":"https://api.github.com/repos/src-d/lookout/assignees{/user}","branches_url":"https://api.github.com/repos/src-d/lookout/branches{/branch}","tags_url":"https://api.github.com/repos/src-d/lookout/tags","blobs_url":"https://api.github.com/repos/src-d/lookout/git/blobs{/sha}","git_tags_url":"https://api.github.com/repos/src-d/lookout/git/tags{/sha}","git_refs_url":"https://api.github.com/repos/src-d/lookout/git/refs{/sha}","trees_url":"https://api.github.com/repos/src-d/lookout/git/trees{/sha}","statuses_url":"https://api.github.com/repos/src-d/lookout/statuses/{sha}","languages_url":"https://api.github.com/repos/src-d/lookout/languages","stargazers_url":"https://api.github.com/repos/src-d/lookout/stargazers","contributors_url":"https://api.github.com/repos/src-d/lookout/contributors","subscribers_url":"https://api.github.com/repos/src-d/lookout/subscribers","subscription_url":"https://api.github.com/repos/src-d/lookout/subscription","commits_url":"https://api.github.com/repos/src-d/lookout/commits{/sha}","git_commits_url":"https://api.github.com/repos/src-d/lookout/git/commits{/sha}","comments_url":"https://api.github.com/repos/src-d/lookout/comments{/number}","issue_comment_url":"https://api.github.com/repos/src-d/lookout/issues/comments{/number}","contents_url":"https://api.github.com/repos/src-d/lookout/contents/{+path}","compare_url":"https://api.github.com/repos/src-d/lookout/compare/{base}...{head}","merges_url":"https://api.github.com/repos/src-d/lookout/merges","archive_url":"https://api.github.com/repos/src-d/lookout/{archive_format}{/ref}","downloads_url":"https://api.github.com/repos/src-d/lookout/downloads","issues_url":"https://api.github.com/repos/src-d/lookout/issues{/number}","pulls_url":"https://api.github.com/repos/src-d/lookout/pulls{/number}","milestones_url":"https://api.github.com/repos/src-d/lookout/milestones{/number}","notifications_url":"https://api.github.com/repos/src-d/lookout/notifications{?since,all,participating}","labels_url":"https://api.github.com/repos/src-d/lookout/labels{/name}","releases_url":"https://api.github.com/repos/src-d/lookout/releases{/id}","deployments_url":"https://api.github.com/repos/src-d/lookout/deployments","created_at":"2018-06-05T08:37:23Z","updated_at":"2025-10-05T17:39:33Z","pushed_at":"2021-08-03T19:18:36Z","git_url":"git://github.com/src-d/lookout.git","ssh_url":"git@github.com:src-d/lookout.git","clone_url":"https://github.com/src-d/lookout.git","svn_url":"https://github.com/src-d/lookout","homepage":"https://docs.sourced.tech/lookout","size":60130,"stargazers_count":152,"watchers_count":152,"language":"Go","has_issues":true,"has_projects":false,"has_downloads":true,"has_wiki":false,"has_pages":false,"has_discussions":false,"forks_count":33,"mirror_url":null,"archived":false,"disabled":false,"open_issues_count":84,"license":{"key":"agpl-3.0","name":"GNU Affero General Public License v3.0","spdx_id":"AGPL-3.0","url":"https://api.github.com/licenses/agpl-3.0","node_id":"MDc6TGljZW5zZTE="},"allow_forking":true,"is_template":false,"web_commit_signoff_required":false,"has_pull_requests":true,"pull_request_creation_policy":"all","topics":["code-review","github","lookout"],"visibility":"public","forks":33,"open_issues":84,"watchers":152,"default_branch":"master"}},"_links":{"self":{"href":"https://api.github.com/repos/src-d/lookout/pulls/811"},"html":{"href":"https://github.com/src-d/lookout/pull/811"},"issue":{"href":"https://api.github.com/repos/src-d/lookout/issues/811"},"comments":{"href":"https://api.github.com/repos/src-d/lookout/issues/811/comments"},"review_comments":{"href":"https://api.github.com/repos/src-d/lookout/pulls/811/comments"},"review_comment":{"href":"https://api.github.com/repos/src-d/lookout/pulls/comments{/number}"},"commits":{"href":"https://api.github.com/repos/src-d/lookout/pulls/811/commits"},"statuses":{"href":"https://api.github.com/repos/src-d/lookout/statuses/50ade8490a1b6bbf07adbc7ae9fa6ab5fa9f76f1"}},"author_association":"NONE","auto_merge":null,"assignee":null,"active_lock_reason":null},{"url":"https://api.github.com/repos/src-d/lookout/pulls/810","id":602901211,"node_id":"MDExOlB1bGxSZXF1ZXN0NjAyOTAxMjEx","html_url":"https://github.com/src-d/lookout/pull/810","diff_url":"https://github.com/src-d/lookout/pull/810.diff","patch_url":"https://github.com/src-d/lookout/pull/810.patch","issue_url":"https://api.github.com/repos/src-d/lookout/issues/810","number":810,"state":"open","locked":false,"title":"[Security] Bump y18n from 3.2.1 to 3.2.2 in /frontend","user":{"login":"dependabot-preview[bot]","id":27856297,"node_id":"MDM6Qm90Mjc4NTYyOTc=","avatar_url":"https://avatars.githubusercontent.com/in/2141?v=4","gravatar_id":"","url":"https://api.github.com/users/dependabot-preview%5Bbot%5D","html_url":"https://github.com/apps/dependabot-preview","followers_url":"https://api.github.com/users/dependabot-preview%5Bbot%5D/followers","following_url":"https://api.github.com/users/dependabot-preview%5Bbot%5D/following{/other_user}","gists_url":"https://api.github.com/users/dependabot-preview%5Bbot%5D/gists{/gist_id}","starred_url":"https://api.github.com/users/dependabot-preview%5Bbot%5D/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/dependabot-preview%5Bbot%5D/subscriptions","organizations_url":"https://api.github.com/users/dependabot-preview%5Bbot%5D/orgs","repos_url":"https://api.github.com/users/dependabot-preview%5Bbot%5D/repos","events_url":"https://api.github.com/users/dependabot-preview%5Bbot%5D/events{/privacy}","received_events_url":"https://api.github.com/users/dependabot-preview%5Bbot%5D/received_events","type":"Bot","user_view_type":"public","site_admin":false},"body":"Bumps [y18n](https://github.com/yargs/y18n) from 3.2.1 to 3.2.2. **This update includes a security fix.**\n<details>\n<summary>Vulnerabilities fixed</summary>\n<p><em>Sourced from <a href=\"https://github.com/advisories/GHSA-c4w7-xm78-47vh\">The GitHub Security Advisory Database</a>.</em></p>\n<blockquote>\n<p><strong>Prototype Pollution</strong></p>\n<h3>Overview</h3>\n<p>The npm package <code>y18n</code> before versions 3.2.2, 4.0.1, and 5.0.5 is vulnerable to Prototype Pollution.</p>\n<h3>POC</h3>\n<pre><code>const y18n = require('y18n')();\n<p>y18n.setLocale('<strong>proto</strong>');\ny18n.updateLocale({polluted: true});</p>\n<p>console.log(polluted); // true\n</code></pre></p>\n<h3>Recommendation</h3>\n<p>Upgrade to version 3.2.2, 4.0.1, 5.0.5 or later.</p>\n<p>Affected versions: &lt; 3.2.2</p>\n</blockquote>\n</details>\n<details>\n<summary>Commits</summary>\n<ul>\n<li>See full diff in <a href=\"https://github.com/yargs/y18n/commits\">compare view</a></li>\n</ul>\n</details>\n<details>\n<summary>Maintainer changes</summary>\n<p>This version was pushed to npm by <a href=\"https://www.npmjs.com/~oss-bot\">oss-bot</a>, a new releaser for y18n since your current version.</p>\n</details>\n<br />\n\n\n[![Dependabot compatibility score](https://api.dependabot.com/badges/compatibility_score?dependency-name=y18n&package-manager=npm_and_yarn&previous-version=3.2.1&new-version=3.2.2)](https://dependabot.com/compatibility-score/?dependency-name=y18n&package-manager=npm_and_yarn&previous-version=3.2.1&new-version=3.2.2)\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n<details>\n<summary>Dependabot commands and options</summary>\n<br />\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot merge` will merge this PR after your CI passes on it\n- `@dependabot squash and merge` will squash and merge this PR after your CI passes on it\n- `@dependabot cancel merge` will cancel a previously requested merge and block automerging\n- `@dependabot reopen` will reopen this PR if it is closed\n- `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually\n- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot use these labels` will set the current labels as the default for future PRs for this repo and language\n- `@dependabot use these reviewers` will set the current reviewers as the default for future PRs for this repo and language\n- `@dependabot use these assignees` will set the current assignees as the default for future PRs for this repo and language\n- `@dependabot use this milestone` will set the current milestone as the default for future PRs for this repo and language\n- `@dependabot badge me` will comment on this PR with code to add a \"Dependabot enabled\" badge to your readme\n\nAdditionally, you can set the following in your Dependabot [dashboard](https://app.dependabot.com):\n- Update frequency (including time of day and day of week)\n- Pull request limits (per update run and/or open at any time)\n- Automerge options (never/patch/minor, and dev/runtime dependencies)\n- Out-of-range updates (receive only lockfile updates, if desired)\n- Security updates (receive only security updates, if desired)\n\n\n\n</details>","created_at":"2021-03-29T16:20:38Z","updated_at":"2021-03-29T16:20:39Z","closed_at":null,"merged_at":null,"merge_commit_sha":"33ab597c46851502f78d6d854ed7d8e1f4e378ca","assignees":[],"requested_reviewers":[],"requested_teams":[],"labels":[{"id":1224325914,"node_id":"MDU6TGFiZWwxMjI0MzI1OTE0","url":"https://api.github.com/repos/src-d/lookout/labels/dependencies","name":"dependencies","color":"0025ff","default":false,"description":"Pull requests that update a dependency file"},{"id":1225416698,"node_id":"MDU6TGFiZWwxMjI1NDE2Njk4","url":"https://api.github.com/repos/src-d/lookout/labels/javascript","name":"javascript","color":"168700","default":false,"description":"Pull requests that update Javascript code"},{"id":1445656551,"node_id":"MDU6TGFiZWwxNDQ1NjU2NTUx","url":"https://api.github.com/repos/src-d/lookout/labels/security","name":"security","color":"ee0701","default":false,"description":"Pull requests that address a security vulnerability"}],"milestone":null,"draft":false,"commits_url":"https://api.github.com/repos/src-d/lookout/pulls/810/commits","review_comments_url":"https://api.github.com/repos/src-d/lookout/pulls/810/comments","review_comment_url":"https://api.github.com/repos/src-d/lookout/pulls/comments{/number}","comments_url":"https://api.github.com/repos/src-d/lookout/issues/810/comments","statuses_url":"https://api.github.com/repos/src-d/lookout/statuses/4e39099c9a4b5aed8ffe1cfc61e73c0dcfe23cf1","head":{"label":"src-d:dependabot/npm_and_yarn/frontend/y18n-3.2.2","ref":"dependabot/npm_and_yarn/frontend/y18n-3.2.2","sha":"4e39099c9a4b5aed8ffe1cfc61e73c0dcfe23cf1","user":{"login":"src-d","id":15128793,"node_id":"MDEyOk9yZ2FuaXphdGlvbjE1MTI4Nzkz","avatar_url":"https://avatars.githubusercontent.com/u/15128793?v=4","gravatar_id":"","url":"https://api.github.com/users/src-d","html_url":"https://github.com/src-d","followers_url":"https://api.github.com/users/src-d/followers","following_url":"https://api.github.com/users/src-d/following{/other_user}","gists_url":"https://api.github.com/users/src-d/gists{/gist_id}","starred_url":"https://api.github.com/users/src-d/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/src-d/subscriptions","organizations_url":"https://api.github.com/users/src-d/orgs","repos_url":"https://api.github.com/users/src-d/repos","events_url":"https://api.github.com/users/src-d/events{/privacy}","received_events_url":"https://api.github.com/users/src-d/received_events","type":"Organization","user_view_type":"public","site_admin":false},"repo":{"id":136146572,"node_id":"MDEwOlJlcG9zaXRvcnkxMzYxNDY1NzI=","name":"lookout","full_name":"src-d/lookout","private":false,"owner":{"login":"src-d","id":15128793,"node_id":"MDEyOk9yZ2FuaXphdGlvbjE1MTI4Nzkz","avatar_url":"https://avatars.githubusercontent.com/u/15128793?v=4","gravatar_id":"","url":"https://api.github.com/users/src-d","html_url":"https://github.com/src-d","followers_url":"https://api.github.com/users/src-d/followers","following_url":"https://api.github.com/users/src-d/following{/other_user}","gists_url":"https://api.github.com/users/src-d/gists{/gist_id}","starred_url":"https://api.github.com/users/src-d/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/src-d/subscriptions","organizations_url":"https://api.github.com/users/src-d/orgs","repos_url":"https://api.github.com/users/src-d/repos","events_url":"https://api.github.com/users/src-d/events{/privacy}","received_events_url":"https://api.github.com/users/src-d/received_events","type":"Organization","user_view_type":"public","site_admin":false},"html_url":"https://github.com/src-d/lookout","description":"Assisted code review, running custom code analyzers on pull requests","fork":false,"url":"https://api.github.com/repos/src-d/lookout","forks_url":"https://api.github.com/repos/src-d/lookout/forks","keys_url":"https://api.github.com/repos/src-d/lookout/keys{/key_id}","collaborators_url":"https://api.github.com/repos/src-d/lookout/collaborators{/collaborator}","teams_url":"https://api.github.com/repos/src-d/lookout/teams","hooks_url":"https://api.github.com/repos/src-d/lookout/hooks","issue_events_url":"https://api.github.com/repos/src-d/lookout/issues/events{/number}","events_url":"https://api.github.com/repos/src-d/lookout/events","assignees_url":"https://api.github.com/repos/src-d/lookout/assignees{/user}","branches_url":"https://api.github.com/repos/src-d/lookout/branches{/branch}","tags_url":"https://api.github.com/repos/src-d/lookout/tags","blobs_url":"https://api.github.com/repos/src-d/lookout/git/blobs{/sha}","git_tags_url":"https://api.github.com/repos/src-d/lookout/git/tags{/sha}","git_refs_url":"https://api.github.com/repos/src-d/lookout/git/refs{/sha}","trees_url":"https://api.github.com/repos/src-d/lookout/git/trees{/sha}","statuses_url":"https://api.github.com/repos/src-d/lookout/statuses/{sha}","languages_url":"https://api.github.com/repos/src-d/lookout/languages","stargazers_url":"https://api.github.com/repos/src-d/lookout/stargazers","contributors_url":"https://api.github.com/repos/src-d/lookout/contributors","subscribers_url":"https://api.github.com/repos/src-d/lookout/subscribers","subscription_url":"https://api.github.com/repos/src-d/lookout/subscription","commits_url":"https://api.github.com/repos/src-d/lookout/commits{/sha}","git_commits_url":"https://api.github.com/repos/src-d/lookout/git/commits{/sha}","comments_url":"https://api.github.com/repos/src-d/lookout/comments{/number}","issue_comment_url":"https://api.github.com/repos/src-d/lookout/issues/comments{/number}","contents_url":"https://api.github.com/repos/src-d/lookout/contents/{+path}","compare_url":"https://api.github.com/repos/src-d/lookout/compare/{base}...{head}","merges_url":"https://api.github.com/repos/src-d/lookout/merges","archive_url":"https://api.github.com/repos/src-d/lookout/{archive_format}{/ref}","downloads_url":"https://api.github.com/repos/src-d/lookout/downloads","issues_url":"https://api.github.com/repos/src-d/lookout/issues{/number}","pulls_url":"https://api.github.com/repos/src-d/lookout/pulls{/number}","milestones_url":"https://api.github.com/repos/src-d/lookout/milestones{/number}","notifications_url":"https://api.github.com/repos/src-d/lookout/notifications{?since,all,participating}","labels_url":"https://api.github.com/repos/src-d/lookout/labels{/name}","releases_url":"https://api.github.com/repos/src-d/lookout/releases{/id}","deployments_url":"https://api.github.com/repos/src-d/lookout/deployments","created_at":"2018-06-05T08:37:23Z","updated_at":"2025-10-05T17:39:33Z","pushed_at":"2021-08-03T19:18:36Z","git_url":"git://github.com/src-d/lookout.git","ssh_url":"git@github.com:src-d/lookout.git","clone_url":"https://github.com/src-d/lookout.git","svn_url":"https://github.com/src-d/lookout","homepage":"https://docs.sourced.tech/lookout","size":60130,"stargazers_count":152,"watchers_count":152,"language":"Go","has_issues":true,"has_projects":false,"has_downloads":true,"has_wiki":false,"has_pages":false,"has_discussions":false,"forks_count":33,"mirror_url":null,"archived":false,"disabled":false,"open_issues_count":84,"license":{"key":"agpl-3.0","name":"GNU Affero General Public License v3.0","spdx_id":"AGPL-3.0","url":"https://api.github.com/licenses/agpl-3.0","node_id":"MDc6TGljZW5zZTE="},"allow_forking":true,"is_template":false,"web_commit_signoff_required":false,"has_pull_requests":true,"pull_request_creation_policy":"all","topics":["code-review","github","lookout"],"visibility":"public","forks":33,"open_issues":84,"watchers":152,"default_branch":"master"}},"base":{"label":"src-d:master","ref":"master","sha":"d5cccd9aed531327965c374533f42e0469af4cda","user":{"login":"src-d","id":15128793,"node_id":"MDEyOk9yZ2FuaXphdGlvbjE1MTI4Nzkz","avatar_url":"https://avatars.githubusercontent.com/u/15128793?v=4","gravatar_id":"","url":"https://api.github.com/users/src-d","html_url":"https://github.com/src-d","followers_url":"https://api.github.com/users/src-d/followers","following_url":"https://api.github.com/users/src-d/following{/other_user}","gists_url":"https://api.github.com/users/src-d/gists{/gist_id}","starred_url":"https://api.github.com/users/src-d/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/src-d/subscriptions","organizations_url":"https://api.github.com/users/src-d/orgs","repos_url":"https://api.github.com/users/src-d/repos","events_url":"https://api.github.com/users/src-d/events{/privacy}","received_events_url":"https://api.github.com/users/src-d/received_events","type":"Organization","user_view_type":"public","site_admin":false},"repo":{"id":136146572,"node_id":"MDEwOlJlcG9zaXRvcnkxMzYxNDY1NzI=","name":"lookout","full_name":"src-d/lookout","private":false,"owner":{"login":"src-d","id":15128793,"node_id":"MDEyOk9yZ2FuaXphdGlvbjE1MTI4Nzkz","avatar_url":"https://avatars.githubusercontent.com/u/15128793?v=4","gravatar_id":"","url":"https://api.github.com/users/src-d","html_url":"https://github.com/src-d","followers_url":"https://api.github.com/users/src-d/followers","following_url":"https://api.github.com/users/src-d/following{/other_user}","gists_url":"https://api.github.com/users/src-d/gists{/gist_id}","starred_url":"https://api.github.com/users/src-d/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/src-d/subscriptions","organizations_url":"https://api.github.com/users/src-d/orgs","repos_url":"https://api.github.com/users/src-d/repos","events_url":"https://api.github.com/users/src-d/events{/privacy}","received_events_url":"https://api.github.com/users/src-d/received_events","type":"Organization","user_view_type":"public","site_admin":false},"html_url":"https://github.com/src-d/lookout","description":"Assisted code review, running custom code analyzers on pull requests","fork":false,"url":"https://api.github.com/repos/src-d/lookout","forks_url":"https://api.github.com/repos/src-d/lookout/forks","keys_url":"https://api.github.com/repos/src-d/lookout/keys{/key_id}","collaborators_url":"https://api.github.com/repos/src-d/lookout/collaborators{/collaborator}","teams_url":"https://api.github.com/repos/src-d/lookout/teams","hooks_url":"https://api.github.com/repos/src-d/lookout/hooks","issue_events_url":"https://api.github.com/repos/src-d/lookout/issues/events{/number}","events_url":"https://api.github.com/repos/src-d/lookout/events","assignees_url":"https://api.github.com/repos/src-d/lookout/assignees{/user}","branches_url":"https://api.github.com/repos/src-d/lookout/branches{/branch}","tags_url":"https://api.github.com/repos/src-d/lookout/tags","blobs_url":"https://api.github.com/repos/src-d/lookout/git/blobs{/sha}","git_tags_url":"https://api.github.com/repos/src-d/lookout/git/tags{/sha}","git_refs_url":"https://api.github.com/repos/src-d/lookout/git/refs{/sha}","trees_url":"https://api.github.com/repos/src-d/lookout/git/trees{/sha}","statuses_url":"https://api.github.com/repos/src-d/lookout/statuses/{sha}","languages_url":"https://api.github.com/repos/src-d/lookout/languages","stargazers_url":"https://api.github.com/repos/src-d/lookout/stargazers","contributors_url":"https://api.github.com/repos/src-d/lookout/contributors","subscribers_url":"https://api.github.com/repos/src-d/lookout/subscribers","subscription_url":"https://api.github.com/repos/src-d/lookout/subscription","commits_url":"https://api.github.com/repos/src-d/lookout/commits{/sha}","git_commits_url":"https://api.github.com/repos/src-d/lookout/git/commits{/sha}","comments_url":"https://api.github.com/repos/src-d/lookout/comments{/number}","issue_comment_url":"https://api.github.com/repos/src-d/lookout/issues/comments{/number}","contents_url":"https://api.github.com/repos/src-d/lookout/contents/{+path}","compare_url":"https://api.github.com/repos/src-d/lookout/compare/{base}...{head}","merges_url":"https://api.github.com/repos/src-d/lookout/merges","archive_url":"https://api.github.com/repos/src-d/lookout/{archive_format}{/ref}","downloads_url":"https://api.github.com/repos/src-d/lookout/downloads","issues_url":"https://api.github.com/repos/src-d/lookout/issues{/number}","pulls_url":"https://api.github.com/repos/src-d/lookout/pulls{/number}","milestones_url":"https://api.github.com/repos/src-d/lookout/milestones{/number}","notifications_url":"https://api.github.com/repos/src-d/lookout/notifications{?since,all,participating}","labels_url":"https://api.github.com/repos/src-d/lookout/labels{/name}","releases_url":"https://api.github.com/repos/src-d/lookout/releases{/id}","deployments_url":"https://api.github.com/repos/src-d/lookout/deployments","created_at":"2018-06-05T08:37:23Z","updated_at":"2025-10-05T17:39:33Z","pushed_at":"2021-08-03T19:18:36Z","git_url":"git://github.com/src-d/lookout.git","ssh_url":"git@github.com:src-d/lookout.git","clone_url":"https://github.com/src-d/lookout.git","svn_url":"https://github.com/src-d/lookout","homepage":"https://docs.sourced.tech/lookout","size":60130,"stargazers_count":152,"watchers_count":152,"language":"Go","has_issues":true,"has_projects":false,"has_downloads":true,"has_wiki":false,"has_pages":false,"has_discussions":false,"forks_count":33,"mirror_url":null,"archived":false,"disabled":false,"open_issues_count":84,"license":{"key":"agpl-3.0","name":"GNU Affero General Public License v3.0","spdx_id":"AGPL-3.0","url":"https://api.github.com/licenses/agpl-3.0","node_id":"MDc6TGljZW5zZTE="},"allow_forking":true,"is_template":false,"web_commit_signoff_required":false,"has_pull_requests":true,"pull_request_creation_policy":"all","topics":["code-review","github","lookout"],"visibility":"public","forks":33,"open_issues":84,"watchers":152,"default_branch":"master"}},"_links":{"self":{"href":"https://api.github.com/repos/src-d/lookout/pulls/810"},"html":{"href":"https://github.com/src-d/lookout/pull/810"},"issue":{"href":"https://api.github.com/repos/src-d/lookout/issues/810"},"comments":{"href":"https://api.github.com/repos/src-d/lookout/issues/810/comments"},"review_comments":{"href":"https://api.github.com/repos/src-d/lookout/pulls/810/comments"},"review_comment":{"href":"https://api.github.com/repos/src-d/lookout/pulls/comments{/number}"},"commits":{"href":"https://api.github.com/repos/src-d/lookout/pulls/810/commits"},"statuses":{"href":"https://api.github.com/repos/src-d/lookout/statuses/4e39099c9a4b5aed8ffe1cfc61e73c0dcfe23cf1"}},"author_association":"NONE","auto_merge":null,"assignee":null,"active_lock_reason":null},{"url":"https://api.github.com/repos/src-d/lookout/pulls/804","id":581746706,"node_id":"MDExOlB1bGxSZXF1ZXN0NTgxNzQ2NzA2","html_url":"https://github.com/src-d/lookout/pull/804","diff_url":"https://github.com/src-d/lookout/pull/804.diff","patch_url":"https://github.com/src-d/lookout/pull/804.patch","issue_url":"https://api.github.com/repos/src-d/lookout/issues/804","number":804,"state":"open","locked":false,"title":"[Security] Bump elliptic from 6.4.1 to 6.5.4 in /frontend","user":{"login":"dependabot-preview[bot]","id":27856297,"node_id":"MDM6Qm90Mjc4NTYyOTc=","avatar_url":"https://avatars.githubusercontent.com/in/2141?v=4","gravatar_id":"","url":"https://api.github.com/users/dependabot-preview%5Bbot%5D","html_url":"https://github.com/apps/dependabot-preview","followers_url":"https://api.github.com/users/dependabot-preview%5Bbot%5D/followers","following_url":"https://api.github.com/users/dependabot-preview%5Bbot%5D/following{/other_user}","gists_url":"https://api.github.com/users/dependabot-preview%5Bbot%5D/gists{/gist_id}","starred_url":"https://api.github.com/users/dependabot-preview%5Bbot%5D/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/dependabot-preview%5Bbot%5D/subscriptions","organizations_url":"https://api.github.com/users/dependabot-preview%5Bbot%5D/orgs","repos_url":"https://api.github.com/users/dependabot-preview%5Bbot%5D/repos","events_url":"https://api.github.com/users/dependabot-preview%5Bbot%5D/events{/privacy}","received_events_url":"https://api.github.com/users/dependabot-preview%5Bbot%5D/received_events","type":"Bot","user_view_type":"public","site_admin":false},"body":"Bumps [elliptic](https://github.com/indutny/elliptic) from 6.4.1 to 6.5.4. **This update includes a security fix.**\n<details>\n<summary>Vulnerabilities fixed</summary>\n<p><em>Sourced from <a href=\"https://github.com/advisories/GHSA-vh7m-p724-62c2\">The GitHub Security Advisory Database</a>.</em></p>\n<blockquote>\n<p><strong>Signature Malleabillity in elliptic</strong>\nThe Elliptic package before version 6.5.3 for Node.js allows ECDSA signature malleability via variations in encoding, leading '\\0' bytes, or integer overflows. This could conceivably have a security-relevant impact if an application relied on a single canonical signature.</p>\n<p>Affected versions: &lt; 6.5.3</p>\n</blockquote>\n</details>\n<details>\n<summary>Commits</summary>\n<ul>\n<li><a href=\"https://github.com/indutny/elliptic/commit/43ac7f230069bd1575e1e4a58394a512303ba803\"><code>43ac7f2</code></a> 6.5.4</li>\n<li><a href=\"https://github.com/indutny/elliptic/commit/f4bc72be11b0a508fb790f445c43534307c9255b\"><code>f4bc72b</code></a> package: bump deps</li>\n<li><a href=\"https://github.com/indutny/elliptic/commit/441b7428b0e8f6636c42118ad2aaa186d3c34c3f\"><code>441b742</code></a> ec: validate that a point before deriving keys</li>\n<li><a href=\"https://github.com/indutny/elliptic/commit/e71b2d9359c5fe9437fbf46f1f05096de447de57\"><code>e71b2d9</code></a> lib: relint using eslint</li>\n<li><a href=\"https://github.com/indutny/elliptic/commit/8421a01aa3ff789c79f91eaf8845558a7be2b9fa\"><code>8421a01</code></a> build(deps): bump elliptic from 6.4.1 to 6.5.3 (<a href=\"https://github-redirect.dependabot.com/indutny/elliptic/issues/231\">#231</a>)</li>\n<li><a href=\"https://github.com/indutny/elliptic/commit/8647803dc3d90506aa03021737f7b061ba959ae1\"><code>8647803</code></a> 6.5.3</li>\n<li><a href=\"https://github.com/indutny/elliptic/commit/856fe4d99fe7b6200556e6400b3bf585b1721bec\"><code>856fe4d</code></a> signature: prevent malleability and overflows</li>\n<li><a href=\"https://github.com/indutny/elliptic/commit/60489415e545efdfd3010ae74b9726facbf08ca8\"><code>6048941</code></a> 6.5.2</li>\n<li><a href=\"https://github.com/indutny/elliptic/commit/9984964457c9f8a63b91b01ea103260417eca237\"><code>9984964</code></a> package: bump dependencies</li>\n<li><a href=\"https://github.com/indutny/elliptic/commit/ec735edde187a43693197f6fa3667ceade751a3a\"><code>ec735ed</code></a> utils: leak less information in <code>getNAF()</code></li>\n<li>Additional commits viewable in <a href=\"https://github.com/indutny/elliptic/compare/v6.4.1...v6.5.4\">compare view</a></li>\n</ul>\n</details>\n<br />\n\n\n[![Dependabot compatibility score](https://api.dependabot.com/badges/compatibility_score?dependency-name=elliptic&package-manager=npm_and_yarn&previous-version=6.4.1&new-version=6.5.4)](https://dependabot.com/compatibility-score/?dependency-name=elliptic&package-manager=npm_and_yarn&previous-version=6.4.1&new-version=6.5.4)\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n<details>\n<summary>Dependabot commands and options</summary>\n<br />\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot merge` will merge this PR after your CI passes on it\n- `@dependabot squash and merge` will squash and merge this PR after your CI passes on it\n- `@dependabot cancel merge` will cancel a previously requested merge and block automerging\n- `@dependabot reopen` will reopen this PR if it is closed\n- `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually\n- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot use these labels` will set the current labels as the default for future PRs for this repo and language\n- `@dependabot use these reviewers` will set the current reviewers as the default for future PRs for this repo and language\n- `@dependabot use these assignees` will set the current assignees as the default for future PRs for this repo and language\n- `@dependabot use this milestone` will set the current milestone as the default for future PRs for this repo and language\n- `@dependabot badge me` will comment on this PR with code to add a \"Dependabot enabled\" badge to your readme\n\nAdditionally, you can set the following in your Dependabot [dashboard](https://app.dependabot.com):\n- Update frequency (including time of day and day of week)\n- Pull request limits (per update run and/or open at any time)\n- Automerge options (never/patch/minor, and dev/runtime dependencies)\n- Out-of-range updates (receive only lockfile updates, if desired)\n- Security updates (receive only security updates, if desired)\n\n\n\n</details>","created_at":"2021-03-01T05:49:47Z","updated_at":"2021-03-01T05:49:50Z","closed_at":null,"merged_at":null,"merge_commit_sha":"19e82e68bc6a8e36a0c944e2843b028710948fc1","assignees":[],"requested_reviewers":[],"requested_teams":[],"labels":[{"id":1224325914,"node_id":"MDU6TGFiZWwxMjI0MzI1OTE0","url":"https://api.github.com/repos/src-d/lookout/labels/dependencies","name":"dependencies","color":"0025ff","default":false,"description":"Pull requests that update a dependency file"},{"id":1225416698,"node_id":"MDU6TGFiZWwxMjI1NDE2Njk4","url":"https://api.github.com/repos/src-d/lookout/labels/javascript","name":"javascript","color":"168700","default":false,"description":"Pull requests that update Javascript code"},{"id":1445656551,"node_id":"MDU6TGFiZWwxNDQ1NjU2NTUx","url":"https://api.github.com/repos/src-d/lookout/labels/security","name":"security","color":"ee0701","default":false,"description":"Pull requests that address a security vulnerability"}],"milestone":null,"draft":false,"commits_url":"https://api.github.com/repos/src-d/lookout/pulls/804/commits","review_comments_url":"https://api.github.com/repos/src-d/lookout/pulls/804/comments","review_comment_url":"https://api.github.com/repos/src-d/lookout/pulls/comments{/number}","comments_url":"https://api.github.com/repos/src-d/lookout/issues/804/comments","statuses_url":"https://api.github.com/repos/src-d/lookout/statuses/893bf0bd3e0e842e39f2478192d9158a49ae6472","head":{"label":"src-d:dependabot/npm_and_yarn/frontend/elliptic-6.5.4","ref":"dependabot/npm_and_yarn/frontend/elliptic-6.5.4","sha":"893bf0bd3e0e842e39f2478192d9158a49ae6472","user":{"login":"src-d","id":15128793,"node_id":"MDEyOk9yZ2FuaXphdGlvbjE1MTI4Nzkz","avatar_url":"https://avatars.githubusercontent.com/u/15128793?v=4","gravatar_id":"","url":"https://api.github.com/users/src-d","html_url":"https://github.com/src-d","followers_url":"https://api.github.com/users/src-d/followers","following_url":"https://api.github.com/users/src-d/following{/other_user}","gists_url":"https://api.github.com/users/src-d/gists{/gist_id}","starred_url":"https://api.github.com/users/src-d/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/src-d/subscriptions","organizations_url":"https://api.github.com/users/src-d/orgs","repos_url":"https://api.github.com/users/src-d/repos","events_url":"https://api.github.com/users/src-d/events{/privacy}","received_events_url":"https://api.github.com/users/src-d/received_events","type":"Organization","user_view_type":"public","site_admin":false},"repo":{"id":136146572,"node_id":"MDEwOlJlcG9zaXRvcnkxMzYxNDY1NzI=","name":"lookout","full_name":"src-d/lookout","private":false,"owner":{"login":"src-d","id":15128793,"node_id":"MDEyOk9yZ2FuaXphdGlvbjE1MTI4Nzkz","avatar_url":"https://avatars.githubusercontent.com/u/15128793?v=4","gravatar_id":"","url":"https://api.github.com/users/src-d","html_url":"https://github.com/src-d","followers_url":"https://api.github.com/users/src-d/followers","following_url":"https://api.github.com/users/src-d/following{/other_user}","gists_url":"https://api.github.com/users/src-d/gists{/gist_id}","starred_url":"https://api.github.com/users/src-d/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/src-d/subscriptions","organizations_url":"https://api.github.com/users/src-d/orgs","repos_url":"https://api.github.com/users/src-d/repos","events_url":"https://api.github.com/users/src-d/events{/privacy}","received_events_url":"https://api.github.com/users/src-d/received_events","type":"Organization","user_view_type":"public","site_admin":false},"html_url":"https://github.com/src-d/lookout","description":"Assisted code review, running custom code analyzers on pull requests","fork":false,"url":"https://api.github.com/repos/src-d/lookout","forks_url":"https://api.github.com/repos/src-d/lookout/forks","keys_url":"https://api.github.com/repos/src-d/lookout/keys{/key_id}","collaborators_url":"https://api.github.com/repos/src-d/lookout/collaborators{/collaborator}","teams_url":"https://api.github.com/repos/src-d/lookout/teams","hooks_url":"https://api.github.com/repos/src-d/lookout/hooks","issue_events_url":"https://api.github.com/repos/src-d/lookout/issues/events{/number}","events_url":"https://api.github.com/repos/src-d/lookout/events","assignees_url":"https://api.github.com/repos/src-d/lookout/assignees{/user}","branches_url":"https://api.github.com/repos/src-d/lookout/branches{/branch}","tags_url":"https://api.github.com/repos/src-d/lookout/tags","blobs_url":"https://api.github.com/repos/src-d/lookout/git/blobs{/sha}","git_tags_url":"https://api.github.com/repos/src-d/lookout/git/tags{/sha}","git_refs_url":"https://api.github.com/repos/src-d/lookout/git/refs{/sha}","trees_url":"https://api.github.com/repos/src-d/lookout/git/trees{/sha}","statuses_url":"https://api.github.com/repos/src-d/lookout/statuses/{sha}","languages_url":"https://api.github.com/repos/src-d/lookout/languages","stargazers_url":"https://api.github.com/repos/src-d/lookout/stargazers","contributors_url":"https://api.github.com/repos/src-d/lookout/contributors","subscribers_url":"https://api.github.com/repos/src-d/lookout/subscribers","subscription_url":"https://api.github.com/repos/src-d/lookout/subscription","commits_url":"https://api.github.com/repos/src-d/lookout/commits{/sha}","git_commits_url":"https://api.github.com/repos/src-d/lookout/git/commits{/sha}","comments_url":"https://api.github.com/repos/src-d/lookout/comments{/number}","issue_comment_url":"https://api.github.com/repos/src-d/lookout/issues/comments{/number}","contents_url":"https://api.github.com/repos/src-d/lookout/contents/{+path}","compare_url":"https://api.github.com/repos/src-d/lookout/compare/{base}...{head}","merges_url":"https://api.github.com/repos/src-d/lookout/merges","archive_url":"https://api.github.com/repos/src-d/lookout/{archive_format}{/ref}","downloads_url":"https://api.github.com/repos/src-d/lookout/downloads","issues_url":"https://api.github.com/repos/src-d/lookout/issues{/number}","pulls_url":"https://api.github.com/repos/src-d/lookout/pulls{/number}","milestones_url":"https://api.github.com/repos/src-d/lookout/milestones{/number}","notifications_url":"https://api.github.com/repos/src-d/lookout/notifications{?since,all,participating}","labels_url":"https://api.github.com/repos/src-d/lookout/labels{/name}","releases_url":"https://api.github.com/repos/src-d/lookout/releases{/id}","deployments_url":"https://api.github.com/repos/src-d/lookout/deployments","created_at":"2018-06-05T08:37:23Z","updated_at":"2025-10-05T17:39:33Z","pushed_at":"2021-08-03T19:18:36Z","git_url":"git://github.com/src-d/lookout.git","ssh_url":"git@github.com:src-d/lookout.git","clone_url":"https://github.com/src-d/lookout.git","svn_url":"https://github.com/src-d/lookout","homepage":"https://docs.sourced.tech/lookout","size":60130,"stargazers_count":152,"watchers_count":152,"language":"Go","has_issues":true,"has_projects":false,"has_downloads":true,"has_wiki":false,"has_pages":false,"has_discussions":false,"forks_count":33,"mirror_url":null,"archived":false,"disabled":false,"open_issues_count":84,"license":{"key":"agpl-3.0","name":"GNU Affero General Public License v3.0","spdx_id":"AGPL-3.0","url":"https://api.github.com/licenses/agpl-3.0","node_id":"MDc6TGljZW5zZTE="},"allow_forking":true,"is_template":false,"web_commit_signoff_required":false,"has_pull_requests":true,"pull_request_creation_policy":"all","topics":["code-review","github","lookout"],"visibility":"public","forks":33,"open_issues":84,"watchers":152,"default_branch":"master"}},"base":{"label":"src-d:master","ref":"master","sha":"d5cccd9aed531327965c374533f42e0469af4cda","user":{"login":"src-d","id":15128793,"node_id":"MDEyOk9yZ2FuaXphdGlvbjE1MTI4Nzkz","avatar_url":"https://avatars.githubusercontent.com/u/15128793?v=4","gravatar_id":"","url":"https://api.github.com/users/src-d","html_url":"https://github.com/src-d","followers_url":"https://api.github.com/users/src-d/followers","following_url":"https://api.github.com/users/src-d/following{/other_user}","gists_url":"https://api.github.com/users/src-d/gists{/gist_id}","starred_url":"https://api.github.com/users/src-d/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/src-d/subscriptions","organizations_url":"https://api.github.com/users/src-d/orgs","repos_url":"https://api.github.com/users/src-d/repos","events_url":"https://api.github.com/users/src-d/events{/privacy}","received_events_url":"https://api.github.com/users/src-d/received_events","type":"Organization","user_view_type":"public","site_admin":false},"repo":{"id":136146572,"node_id":"MDEwOlJlcG9zaXRvcnkxMzYxNDY1NzI=","name":"lookout","full_name":"src-d/lookout","private":false,"owner":{"login":"src-d","id":15128793,"node_id":"MDEyOk9yZ2FuaXphdGlvbjE1MTI4Nzkz","avatar_url":"https://avatars.githubusercontent.com/u/15128793?v=4","gravatar_id":"","url":"https://api.github.com/users/src-d","html_url":"https://github.com/src-d","followers_url":"https://api.github.com/users/src-d/followers","following_url":"https://api.github.com/users/src-d/following{/other_user}","gists_url":"https://api.github.com/users/src-d/gists{/gist_id}","starred_url":"https://api.github.com/users/src-d/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/src-d/subscriptions","organizations_url":"https://api.github.com/users/src-d/orgs","repos_url":"https://api.github.com/users/src-d/repos","events_url":"https://api.github.com/users/src-d/events{/privacy}","received_events_url":"https://api.github.com/users/src-d/received_events","type":"Organization","user_view_type":"public","site_admin":false},"html_url":"https://github.com/src-d/lookout","description":"Assisted code review, running custom code analyzers on pull requests","fork":false,"url":"https://api.github.com/repos/src-d/lookout","forks_url":"https://api.github.com/repos/src-d/lookout/forks","keys_url":"https://api.github.com/repos/src-d/lookout/keys{/key_id}","collaborators_url":"https://api.github.com/repos/src-d/lookout/collaborators{/collaborator}","teams_url":"https://api.github.com/repos/src-d/lookout/teams","hooks_url":"https://api.github.com/repos/src-d/lookout/hooks","issue_events_url":"https://api.github.com/repos/src-d/lookout/issues/events{/number}","events_url":"https://api.github.com/repos/src-d/lookout/events","assignees_url":"https://api.github.com/repos/src-d/lookout/assignees{/user}","branches_url":"https://api.github.com/repos/src-d/lookout/branches{/branch}","tags_url":"https://api.github.com/repos/src-d/lookout/tags","blobs_url":"https://api.github.com/repos/src-d/lookout/git/blobs{/sha}","git_tags_url":"https://api.github.com/repos/src-d/lookout/git/tags{/sha}","git_refs_url":"https://api.github.com/repos/src-d/lookout/git/refs{/sha}","trees_url":"https://api.github.com/repos/src-d/lookout/git/trees{/sha}","statuses_url":"https://api.github.com/repos/src-d/lookout/statuses/{sha}","languages_url":"https://api.github.com/repos/src-d/lookout/languages","stargazers_url":"https://api.github.com/repos/src-d/lookout/stargazers","contributors_url":"https://api.github.com/repos/src-d/lookout/contributors","subscribers_url":"https://api.github.com/repos/src-d/lookout/subscribers","subscription_url":"https://api.github.com/repos/src-d/lookout/subscription","commits_url":"https://api.github.com/repos/src-d/lookout/commits{/sha}","git_commits_url":"https://api.github.com/repos/src-d/lookout/git/commits{/sha}","comments_url":"https://api.github.com/repos/src-d/lookout/comments{/number}","issue_comment_url":"https://api.github.com/repos/src-d/lookout/issues/comments{/number}","contents_url":"https://api.github.com/repos/src-d/lookout/contents/{+path}","compare_url":"https://api.github.com/repos/src-d/lookout/compare/{base}...{head}","merges_url":"https://api.github.com/repos/src-d/lookout/merges","archive_url":"https://api.github.com/repos/src-d/lookout/{archive_format}{/ref}","downloads_url":"https://api.github.com/repos/src-d/lookout/downloads","issues_url":"https://api.github.com/repos/src-d/lookout/issues{/number}","pulls_url":"https://api.github.com/repos/src-d/lookout/pulls{/number}","milestones_url":"https://api.github.com/repos/src-d/lookout/milestones{/number}","notifications_url":"https://api.github.com/repos/src-d/lookout/notifications{?since,all,participating}","labels_url":"https://api.github.com/repos/src-d/lookout/labels{/name}","releases_url":"https://api.github.com/repos/src-d/lookout/releases{/id}","deployments_url":"https://api.github.com/repos/src-d/lookout/deployments","created_at":"2018-06-05T08:37:23Z","updated_at":"2025-10-05T17:39:33Z","pushed_at":"2021-08-03T19:18:36Z","git_url":"git://github.com/src-d/lookout.git","ssh_url":"git@github.com:src-d/lookout.git","clone_url":"https://github.com/src-d/lookout.git","svn_url":"https://github.com/src-d/lookout","homepage":"https://docs.sourced.tech/lookout","size":60130,"stargazers_count":152,"watchers_count":152,"language":"Go","has_issues":true,"has_projects":false,"has_downloads":true,"has_wiki":false,"has_pages":false,"has_discussions":false,"forks_count":33,"mirror_url":null,"archived":false,"disabled":false,"open_issues_count":84,"license":{"key":"agpl-3.0","name":"GNU Affero General Public License v3.0","spdx_id":"AGPL-3.0","url":"https://api.github.com/licenses/agpl-3.0","node_id":"MDc6TGljZW5zZTE="},"allow_forking":true,"is_template":false,"web_commit_signoff_required":false,"has_pull_requests":true,"pull_request_creation_policy":"all","topics":["code-review","github","lookout"],"visibility":"public","forks":33,"open_issues":84,"watchers":152,"default_branch":"master"}},"_links":{"self":{"href":"https://api.github.com/repos/src-d/lookout/pulls/804"},"html":{"href":"https://github.com/src-d/lookout/pull/804"},"issue":{"href":"https://api.github.com/repos/src-d/lookout/issues/804"},"comments":{"href":"https://api.github.com/repos/src-d/lookout/issues/804/comments"},"review_comments":{"href":"https://api.github.com/repos/src-d/lookout/pulls/804/comments"},"review_comment":{"href":"https://api.github.com/repos/src-d/lookout/pulls/comments{/number}"},"commits":{"href":"https://api.github.com/repos/src-d/lookout/pulls/804/commits"},"statuses":{"href":"https://api.github.com/repos/src-d/lookout/statuses/893bf0bd3e0e842e39f2478192d9158a49ae6472"}},"author_association":"NONE","auto_merge":null,"assignee":null,"active_lock_reason":null},{"url":"https://api.github.com/repos/src-d/lookout/pulls/803","id":581745030,"node_id":"MDExOlB1bGxSZXF1ZXN0NTgxNzQ1MDMw","html_url":"https://github.com/src-d/lookout/pull/803","diff_url":"https://github.com/src-d/lookout/pull/803.diff","patch_url":"https://github.com/src-d/lookout/pull/803.patch","issue_url":"https://api.github.com/repos/src-d/lookout/issues/803","number":803,"state":"open","locked":false,"title":"[Security] Bump dot-prop from 4.2.0 to 4.2.1 in /frontend","user":{"login":"dependabot-preview[bot]","id":27856297,"node_id":"MDM6Qm90Mjc4NTYyOTc=","avatar_url":"https://avatars.githubusercontent.com/in/2141?v=4","gravatar_id":"","url":"https://api.github.com/users/dependabot-preview%5Bbot%5D","html_url":"https://github.com/apps/dependabot-preview","followers_url":"https://api.github.com/users/dependabot-preview%5Bbot%5D/followers","following_url":"https://api.github.com/users/dependabot-preview%5Bbot%5D/following{/other_user}","gists_url":"https://api.github.com/users/dependabot-preview%5Bbot%5D/gists{/gist_id}","starred_url":"https://api.github.com/users/dependabot-preview%5Bbot%5D/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/dependabot-preview%5Bbot%5D/subscriptions","organizations_url":"https://api.github.com/users/dependabot-preview%5Bbot%5D/orgs","repos_url":"https://api.github.com/users/dependabot-preview%5Bbot%5D/repos","events_url":"https://api.github.com/users/dependabot-preview%5Bbot%5D/events{/privacy}","received_events_url":"https://api.github.com/users/dependabot-preview%5Bbot%5D/received_events","type":"Bot","user_view_type":"public","site_admin":false},"body":"Bumps [dot-prop](https://github.com/sindresorhus/dot-prop) from 4.2.0 to 4.2.1. **This update includes a security fix.**\n<details>\n<summary>Vulnerabilities fixed</summary>\n<p><em>Sourced from <a href=\"https://github.com/advisories/GHSA-ff7x-qrg7-qggm\">The GitHub Security Advisory Database</a>.</em></p>\n<blockquote>\n<p><strong>Prototype Pollution in dot-prop</strong>\nPrototype pollution vulnerability in dot-prop npm package before versions 4.2.1 and 5.1.1 allows an attacker to add arbitrary properties to JavaScript language constructs such as objects.</p>\n<p>Affected versions: &lt; 4.2.1</p>\n</blockquote>\n</details>\n<details>\n<summary>Release notes</summary>\n<p><em>Sourced from <a href=\"https://github.com/sindresorhus/dot-prop/releases\">dot-prop's releases</a>.</em></p>\n<blockquote>\n<h2>v4.2.1</h2>\n<ul>\n<li>Backport <a href=\"https://github.com/sindresorhus/dot-prop/commit/3039c8c07f6fdaa8b595ec869ae0895686a7a0f2\">https://github.com/sindresorhus/dot-prop/commit/3039c8c07f6fdaa8b595ec869ae0895686a7a0f2</a> to the v4.x release line.</li>\n</ul>\n</blockquote>\n</details>\n<details>\n<summary>Commits</summary>\n<ul>\n<li><a href=\"https://github.com/sindresorhus/dot-prop/commit/c914124f418f55edea27928e89c94d931babe587\"><code>c914124</code></a> feat: patch 4.2.0 with fixes for CVE-2020-8116</li>\n<li>See full diff in <a href=\"https://github.com/sindresorhus/dot-prop/compare/v4.2.0...v4.2.1\">compare view</a></li>\n</ul>\n</details>\n<br />\n\n\n[![Dependabot compatibility score](https://api.dependabot.com/badges/compatibility_score?dependency-name=dot-prop&package-manager=npm_and_yarn&previous-version=4.2.0&new-version=4.2.1)](https://dependabot.com/compatibility-score/?dependency-name=dot-prop&package-manager=npm_and_yarn&previous-version=4.2.0&new-version=4.2.1)\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n<details>\n<summary>Dependabot commands and options</summary>\n<br />\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot merge` will merge this PR after your CI passes on it\n- `@dependabot squash and merge` will squash and merge this PR after your CI passes on it\n- `@dependabot cancel merge` will cancel a previously requested merge and block automerging\n- `@dependabot reopen` will reopen this PR if it is closed\n- `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually\n- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot use these labels` will set the current labels as the default for future PRs for this repo and language\n- `@dependabot use these reviewers` will set the current reviewers as the default for future PRs for this repo and language\n- `@dependabot use these assignees` will set the current assignees as the default for future PRs for this repo and language\n- `@dependabot use this milestone` will set the current milestone as the default for future PRs for this repo and language\n- `@dependabot badge me` will comment on this PR with code to add a \"Dependabot enabled\" badge to your readme\n\nAdditionally, you can set the following in your Dependabot [dashboard](https://app.dependabot.com):\n- Update frequency (including time of day and day of week)\n- Pull request limits (per update run and/or open at any time)\n- Automerge options (never/patch/minor, and dev/runtime dependencies)\n- Out-of-range updates (receive only lockfile updates, if desired)\n- Security updates (receive only security updates, if desired)\n\n\n\n</details>","created_at":"2021-03-01T05:47:20Z","updated_at":"2021-03-01T05:47:21Z","closed_at":null,"merged_at":null,"merge_commit_sha":"86d037f36236641749b2bdf3d787269d9dcfaeda","assignees":[],"requested_reviewers":[],"requested_teams":[],"labels":[{"id":1224325914,"node_id":"MDU6TGFiZWwxMjI0MzI1OTE0","url":"https://api.github.com/repos/src-d/lookout/labels/dependencies","name":"dependencies","color":"0025ff","default":false,"description":"Pull requests that update a dependency file"},{"id":1225416698,"node_id":"MDU6TGFiZWwxMjI1NDE2Njk4","url":"https://api.github.com/repos/src-d/lookout/labels/javascript","name":"javascript","color":"168700","default":false,"description":"Pull requests that update Javascript code"},{"id":1445656551,"node_id":"MDU6TGFiZWwxNDQ1NjU2NTUx","url":"https://api.github.com/repos/src-d/lookout/labels/security","name":"security","color":"ee0701","default":false,"description":"Pull requests that address a security vulnerability"}],"milestone":null,"draft":false,"commits_url":"https://api.github.com/repos/src-d/lookout/pulls/803/commits","review_comments_url":"https://api.github.com/repos/src-d/lookout/pulls/803/comments","review_comment_url":"https://api.github.com/repos/src-d/lookout/pulls/comments{/number}","comments_url":"https://api.github.com/repos/src-d/lookout/issues/803/comments","statuses_url":"https://api.github.com/repos/src-d/lookout/statuses/c41e18aa93aa74b6f03570f1d7a024551f1c218c","head":{"label":"src-d:dependabot/npm_and_yarn/frontend/dot-prop-4.2.1","ref":"dependabot/npm_and_yarn/frontend/dot-prop-4.2.1","sha":"c41e18aa93aa74b6f03570f1d7a024551f1c218c","user":{"login":"src-d","id":15128793,"node_id":"MDEyOk9yZ2FuaXphdGlvbjE1MTI4Nzkz","avatar_url":"https://avatars.githubusercontent.com/u/15128793?v=4","gravatar_id":"","url":"https://api.github.com/users/src-d","html_url":"https://github.com/src-d","followers_url":"https://api.github.com/users/src-d/followers","following_url":"https://api.github.com/users/src-d/following{/other_user}","gists_url":"https://api.github.com/users/src-d/gists{/gist_id}","starred_url":"https://api.github.com/users/src-d/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/src-d/subscriptions","organizations_url":"https://api.github.com/users/src-d/orgs","repos_url":"https://api.github.com/users/src-d/repos","events_url":"https://api.github.com/users/src-d/events{/privacy}","received_events_url":"https://api.github.com/users/src-d/received_events","type":"Organization","user_view_type":"public","site_admin":false},"repo":{"id":136146572,"node_id":"MDEwOlJlcG9zaXRvcnkxMzYxNDY1NzI=","name":"lookout","full_name":"src-d/lookout","private":false,"owner":{"login":"src-d","id":15128793,"node_id":"MDEyOk9yZ2FuaXphdGlvbjE1MTI4Nzkz","avatar_url":"https://avatars.githubusercontent.com/u/15128793?v=4","gravatar_id":"","url":"https://api.github.com/users/src-d","html_url":"https://github.com/src-d","followers_url":"https://api.github.com/users/src-d/followers","following_url":"https://api.github.com/users/src-d/following{/other_user}","gists_url":"https://api.github.com/users/src-d/gists{/gist_id}","starred_url":"https://api.github.com/users/src-d/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/src-d/subscriptions","organizations_url":"https://api.github.com/users/src-d/orgs","repos_url":"https://api.github.com/users/src-d/repos","events_url":"https://api.github.com/users/src-d/events{/privacy}","received_events_url":"https://api.github.com/users/src-d/received_events","type":"Organization","user_view_type":"public","site_admin":false},"html_url":"https://github.com/src-d/lookout","description":"Assisted code review, running custom code analyzers on pull requests","fork":false,"url":"https://api.github.com/repos/src-d/lookout","forks_url":"https://api.github.com/repos/src-d/lookout/forks","keys_url":"https://api.github.com/repos/src-d/lookout/keys{/key_id}","collaborators_url":"https://api.github.com/repos/src-d/lookout/collaborators{/collaborator}","teams_url":"https://api.github.com/repos/src-d/lookout/teams","hooks_url":"https://api.github.com/repos/src-d/lookout/hooks","issue_events_url":"https://api.github.com/repos/src-d/lookout/issues/events{/number}","events_url":"https://api.github.com/repos/src-d/lookout/events","assignees_url":"https://api.github.com/repos/src-d/lookout/assignees{/user}","branches_url":"https://api.github.com/repos/src-d/lookout/branches{/branch}","tags_url":"https://api.github.com/repos/src-d/lookout/tags","blobs_url":"https://api.github.com/repos/src-d/lookout/git/blobs{/sha}","git_tags_url":"https://api.github.com/repos/src-d/lookout/git/tags{/sha}","git_refs_url":"https://api.github.com/repos/src-d/lookout/git/refs{/sha}","trees_url":"https://api.github.com/repos/src-d/lookout/git/trees{/sha}","statuses_url":"https://api.github.com/repos/src-d/lookout/statuses/{sha}","languages_url":"https://api.github.com/repos/src-d/lookout/languages","stargazers_url":"https://api.github.com/repos/src-d/lookout/stargazers","contributors_url":"https://api.github.com/repos/src-d/lookout/contributors","subscribers_url":"https://api.github.com/repos/src-d/lookout/subscribers","subscription_url":"https://api.github.com/repos/src-d/lookout/subscription","commits_url":"https://api.github.com/repos/src-d/lookout/commits{/sha}","git_commits_url":"https://api.github.com/repos/src-d/lookout/git/commits{/sha}","comments_url":"https://api.github.com/repos/src-d/lookout/comments{/number}","issue_comment_url":"https://api.github.com/repos/src-d/lookout/issues/comments{/number}","contents_url":"https://api.github.com/repos/src-d/lookout/contents/{+path}","compare_url":"https://api.github.com/repos/src-d/lookout/compare/{base}...{head}","merges_url":"https://api.github.com/repos/src-d/lookout/merges","archive_url":"https://api.github.com/repos/src-d/lookout/{archive_format}{/ref}","downloads_url":"https://api.github.com/repos/src-d/lookout/downloads","issues_url":"https://api.github.com/repos/src-d/lookout/issues{/number}","pulls_url":"https://api.github.com/repos/src-d/lookout/pulls{/number}","milestones_url":"https://api.github.com/repos/src-d/lookout/milestones{/number}","notifications_url":"https://api.github.com/repos/src-d/lookout/notifications{?since,all,participating}","labels_url":"https://api.github.com/repos/src-d/lookout/labels{/name}","releases_url":"https://api.github.com/repos/src-d/lookout/releases{/id}","deployments_url":"https://api.github.com/repos/src-d/lookout/deployments","created_at":"2018-06-05T08:37:23Z","updated_at":"2025-10-05T17:39:33Z","pushed_at":"2021-08-03T19:18:36Z","git_url":"git://github.com/src-d/lookout.git","ssh_url":"git@github.com:src-d/lookout.git","clone_url":"https://github.com/src-d/lookout.git","svn_url":"https://github.com/src-d/lookout","homepage":"https://docs.sourced.tech/lookout","size":60130,"stargazers_count":152,"watchers_count":152,"language":"Go","has_issues":true,"has_projects":false,"has_downloads":true,"has_wiki":false,"has_pages":false,"has_discussions":false,"forks_count":33,"mirror_url":null,"archived":false,"disabled":false,"open_issues_count":84,"license":{"key":"agpl-3.0","name":"GNU Affero General Public License v3.0","spdx_id":"AGPL-3.0","url":"https://api.github.com/licenses/agpl-3.0","node_id":"MDc6TGljZW5zZTE="},"allow_forking":true,"is_template":false,"web_commit_signoff_required":false,"has_pull_requests":true,"pull_request_creation_policy":"all","topics":["code-review","github","lookout"],"visibility":"public","forks":33,"open_issues":84,"watchers":152,"default_branch":"master"}},"base":{"label":"src-d:master","ref":"master","sha":"d5cccd9aed531327965c374533f42e0469af4cda","user":{"login":"src-d","id":15128793,"node_id":"MDEyOk9yZ2FuaXphdGlvbjE1MTI4Nzkz","avatar_url":"https://avatars.githubusercontent.com/u/15128793?v=4","gravatar_id":"","url":"https://api.github.com/users/src-d","html_url":"https://github.com/src-d","followers_url":"https://api.github.com/users/src-d/followers","following_url":"https://api.github.com/users/src-d/following{/other_user}","gists_url":"https://api.github.com/users/src-d/gists{/gist_id}","starred_url":"https://api.github.com/users/src-d/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/src-d/subscriptions","organizations_url":"https://api.github.com/users/src-d/orgs","repos_url":"https://api.github.com/users/src-d/repos","events_url":"https://api.github.com/users/src-d/events{/privacy}","received_events_url":"https://api.github.com/users/src-d/received_events","type":"Organization","user_view_type":"public","site_admin":false},"repo":{"id":136146572,"node_id":"MDEwOlJlcG9zaXRvcnkxMzYxNDY1NzI=","name":"lookout","full_name":"src-d/lookout","private":false,"owner":{"login":"src-d","id":15128793,"node_id":"MDEyOk9yZ2FuaXphdGlvbjE1MTI4Nzkz","avatar_url":"https://avatars.githubusercontent.com/u/15128793?v=4","gravatar_id":"","url":"https://api.github.com/users/src-d","html_url":"https://github.com/src-d","followers_url":"https://api.github.com/users/src-d/followers","following_url":"https://api.github.com/users/src-d/following{/other_user}","gists_url":"https://api.github.com/users/src-d/gists{/gist_id}","starred_url":"https://api.github.com/users/src-d/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/src-d/subscriptions","organizations_url":"https://api.github.com/users/src-d/orgs","repos_url":"https://api.github.com/users/src-d/repos","events_url":"https://api.github.com/users/src-d/events{/privacy}","received_events_url":"https://api.github.com/users/src-d/received_events","type":"Organization","user_view_type":"public","site_admin":false},"html_url":"https://github.com/src-d/lookout","description":"Assisted code review, running custom code analyzers on pull requests","fork":false,"url":"https://api.github.com/repos/src-d/lookout","forks_url":"https://api.github.com/repos/src-d/lookout/forks","keys_url":"https://api.github.com/repos/src-d/lookout/keys{/key_id}","collaborators_url":"https://api.github.com/repos/src-d/lookout/collaborators{/collaborator}","teams_url":"https://api.github.com/repos/src-d/lookout/teams","hooks_url":"https://api.github.com/repos/src-d/lookout/hooks","issue_events_url":"https://api.github.com/repos/src-d/lookout/issues/events{/number}","events_url":"https://api.github.com/repos/src-d/lookout/events","assignees_url":"https://api.github.com/repos/src-d/lookout/assignees{/user}","branches_url":"https://api.github.com/repos/src-d/lookout/branches{/branch}","tags_url":"https://api.github.com/repos/src-d/lookout/tags","blobs_url":"https://api.github.com/repos/src-d/lookout/git/blobs{/sha}","git_tags_url":"https://api.github.com/repos/src-d/lookout/git/tags{/sha}","git_refs_url":"https://api.github.com/repos/src-d/lookout/git/refs{/sha}","trees_url":"https://api.github.com/repos/src-d/lookout/git/trees{/sha}","statuses_url":"https://api.github.com/repos/src-d/lookout/statuses/{sha}","languages_url":"https://api.github.com/repos/src-d/lookout/languages","stargazers_url":"https://api.github.com/repos/src-d/lookout/stargazers","contributors_url":"https://api.github.com/repos/src-d/lookout/contributors","subscribers_url":"https://api.github.com/repos/src-d/lookout/subscribers","subscription_url":"https://api.github.com/repos/src-d/lookout/subscription","commits_url":"https://api.github.com/repos/src-d/lookout/commits{/sha}","git_commits_url":"https://api.github.com/repos/src-d/lookout/git/commits{/sha}","comments_url":"https://api.github.com/repos/src-d/lookout/comments{/number}","issue_comment_url":"https://api.github.com/repos/src-d/lookout/issues/comments{/number}","contents_url":"https://api.github.com/repos/src-d/lookout/contents/{+path}","compare_url":"https://api.github.com/repos/src-d/lookout/compare/{base}...{head}","merges_url":"https://api.github.com/repos/src-d/lookout/merges","archive_url":"https://api.github.com/repos/src-d/lookout/{archive_format}{/ref}","downloads_url":"https://api.github.com/repos/src-d/lookout/downloads","issues_url":"https://api.github.com/repos/src-d/lookout/issues{/number}","pulls_url":"https://api.github.com/repos/src-d/lookout/pulls{/number}","milestones_url":"https://api.github.com/repos/src-d/lookout/milestones{/number}","notifications_url":"https://api.github.com/repos/src-d/lookout/notifications{?since,all,participating}","labels_url":"https://api.github.com/repos/src-d/lookout/labels{/name}","releases_url":"https://api.github.com/repos/src-d/lookout/releases{/id}","deployments_url":"https://api.github.com/repos/src-d/lookout/deployments","created_at":"2018-06-05T08:37:23Z","updated_at":"2025-10-05T17:39:33Z","pushed_at":"2021-08-03T19:18:36Z","git_url":"git://github.com/src-d/lookout.git","ssh_url":"git@github.com:src-d/lookout.git","clone_url":"https://github.com/src-d/lookout.git","svn_url":"https://github.com/src-d/lookout","homepage":"https://docs.sourced.tech/lookout","size":60130,"stargazers_count":152,"watchers_count":152,"language":"Go","has_issues":true,"has_projects":false,"has_downloads":true,"has_wiki":false,"has_pages":false,"has_discussions":false,"forks_count":33,"mirror_url":null,"archived":false,"disabled":false,"open_issues_count":84,"license":{"key":"agpl-3.0","name":"GNU Affero General Public License v3.0","spdx_id":"AGPL-3.0","url":"https://api.github.com/licenses/agpl-3.0","node_id":"MDc6TGljZW5zZTE="},"allow_forking":true,"is_template":false,"web_commit_signoff_required":false,"has_pull_requests":true,"pull_request_creation_policy":"all","topics":["code-review","github","lookout"],"visibility":"public","forks":33,"open_issues":84,"watchers":152,"default_branch":"master"}},"_links":{"self":{"href":"https://api.github.com/repos/src-d/lookout/pulls/803"},"html":{"href":"https://github.com/src-d/lookout/pull/803"},"issue":{"href":"https://api.github.com/repos/src-d/lookout/issues/803"},"comments":{"href":"https://api.github.com/repos/src-d/lookout/issues/803/comments"},"review_comments":{"href":"https://api.github.com/repos/src-d/lookout/pulls/803/comments"},"review_comment":{"href":"https://api.github.com/repos/src-d/lookout/pulls/comments{/number}"},"commits":{"href":"https://api.github.com/repos/src-d/lookout/pulls/803/commits"},"statuses":{"href":"https://api.github.com/repos/src-d/lookout/statuses/c41e18aa93aa74b6f03570f1d7a024551f1c218c"}},"author_association":"NONE","auto_merge":null,"assignee":null,"active_lock_reason":null},{"url":"https://api.github.com/repos/src-d/lookout/pulls/801","id":564855701,"node_id":"MDExOlB1bGxSZXF1ZXN0NTY0ODU1NzAx","html_url":"https://github.com/src-d/lookout/pull/801","diff_url":"https://github.com/src-d/lookout/pull/801.diff","patch_url":"https://github.com/src-d/lookout/pull/801.patch","issue_url":"https://api.github.com/repos/src-d/lookout/issues/801","number":801,"state":"open","locked":false,"title":"Bump github.com/stretchr/testify from 1.3.0 to 1.7.0","user":{"login":"dependabot-preview[bot]","id":27856297,"node_id":"MDM6Qm90Mjc4NTYyOTc=","avatar_url":"https://avatars.githubusercontent.com/in/2141?v=4","gravatar_id":"","url":"https://api.github.com/users/dependabot-preview%5Bbot%5D","html_url":"https://github.com/apps/dependabot-preview","followers_url":"https://api.github.com/users/dependabot-preview%5Bbot%5D/followers","following_url":"https://api.github.com/users/dependabot-preview%5Bbot%5D/following{/other_user}","gists_url":"https://api.github.com/users/dependabot-preview%5Bbot%5D/gists{/gist_id}","starred_url":"https://api.github.com/users/dependabot-preview%5Bbot%5D/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/dependabot-preview%5Bbot%5D/subscriptions","organizations_url":"https://api.github.com/users/dependabot-preview%5Bbot%5D/orgs","repos_url":"https://api.github.com/users/dependabot-preview%5Bbot%5D/repos","events_url":"https://api.github.com/users/dependabot-preview%5Bbot%5D/events{/privacy}","received_events_url":"https://api.github.com/users/dependabot-preview%5Bbot%5D/received_events","type":"Bot","user_view_type":"public","site_admin":false},"body":"Bumps [github.com/stretchr/testify](https://github.com/stretchr/testify) from 1.3.0 to 1.7.0.\n<details>\n<summary>Release notes</summary>\n<p><em>Sourced from <a href=\"https://github.com/stretchr/testify/releases\">github.com/stretchr/testify's releases</a>.</em></p>\n<blockquote>\n<h2>Minor improvements and bug fixes</h2>\n<p>Minor feature improvements and bug fixes</p>\n<h2>Fixes breaking change with HTTPBodyContains</h2>\n<p>A breaking change was accidentally released in v1.6.0 which breaks the API for the <code>HTTPBodyContains</code> and <code>HTTPBodyNotContains</code>, this release reverts that change.</p>\n<h2>v1.6.0</h2>\n<p>Latest release of testify. This includes many fixes and enhancements. Please view the <a href=\"https://github.com/stretchr/testify/milestone/3?closed=1\">v1.6.0 milestone</a> for a list of changes.</p>\n<h2>HOTFIX: Revert suite interface type</h2>\n<p>This is a hotfix which reverts the <code>suite</code> package's interface type to use <code>testing.T</code></p>\n<h2>v1.5.0</h2>\n<p>Latest, non-breaking changes merged into master. Please peruse the git log for a detailed changelist</p>\n<h2>v1.4.0</h2>\n<p>The 1.4.0 release includes new matchers and bug fixes. See the <a href=\"https://github.com/stretchr/testify/milestone/2?closed=1\">v.1.4.0 milestone</a> for a complete list of closed issues associated with this release.</p>\n</blockquote>\n</details>\n<details>\n<summary>Commits</summary>\n<ul>\n<li><a href=\"https://github.com/stretchr/testify/commit/acba37e5db06f0093b465a7d47822bf13644b66c\"><code>acba37e</code></a> Only use repeatability if no repeatability left</li>\n<li><a href=\"https://github.com/stretchr/testify/commit/eb8c41ec07f965071ac51cf2ac45ae1e50b6faed\"><code>eb8c41e</code></a> Add more tests to mock package</li>\n<li><a href=\"https://github.com/stretchr/testify/commit/a5830c56d3a29615f93698ad0b1f00206bb03b73\"><code>a5830c5</code></a> Extract method to evaluate closest match</li>\n<li><a href=\"https://github.com/stretchr/testify/commit/1962448488982378ba761489a1d48b22a8283121\"><code>1962448</code></a> Use Repeatability as tie-breaker for closest match</li>\n<li><a href=\"https://github.com/stretchr/testify/commit/92707c0b2d501c60de82176c4aa1cf880abac720\"><code>92707c0</code></a> Fixed the link to not point to assert only</li>\n<li><a href=\"https://github.com/stretchr/testify/commit/05dd0b2b35daf0c6f6ecc1dff3c1c81cdf17a3b2\"><code>05dd0b2</code></a> Updated the readme to point to pkg.dev</li>\n<li><a href=\"https://github.com/stretchr/testify/commit/c26b7f39f88ecc339b622fcbe6531ac5fdccd799\"><code>c26b7f3</code></a> Update assertions.go</li>\n<li><a href=\"https://github.com/stretchr/testify/commit/8fb4b2442e11c5a798920eb5a9c19dbc2603481b\"><code>8fb4b24</code></a> [Fix] The most recent changes to golang/protobuf breaks the spew Circular dat...</li>\n<li><a href=\"https://github.com/stretchr/testify/commit/dc8af7208cb2e78de14b80dd5e5b412713b57508\"><code>dc8af72</code></a> add generated code for positive/negative assertion</li>\n<li><a href=\"https://github.com/stretchr/testify/commit/1544508911aa5fdb73c633fab172cd0e161df0d8\"><code>1544508</code></a> add assert positive/negative</li>\n<li>Additional commits viewable in <a href=\"https://github.com/stretchr/testify/compare/v1.3.0...v1.7.0\">compare view</a></li>\n</ul>\n</details>\n<br />\n\n\n[![Dependabot compatibility score](https://api.dependabot.com/badges/compatibility_score?dependency-name=github.com/stretchr/testify&package-manager=dep&previous-version=1.3.0&new-version=1.7.0)](https://dependabot.com/compatibility-score/?dependency-name=github.com/stretchr/testify&package-manager=dep&previous-version=1.3.0&new-version=1.7.0)\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n<details>\n<summary>Dependabot commands and options</summary>\n<br />\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot merge` will merge this PR after your CI passes on it\n- `@dependabot squash and merge` will squash and merge this PR after your CI passes on it\n- `@dependabot cancel merge` will cancel a previously requested merge and block automerging\n- `@dependabot reopen` will reopen this PR if it is closed\n- `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually\n- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot use these labels` will set the current labels as the default for future PRs for this repo and language\n- `@dependabot use these reviewers` will set the current reviewers as the default for future PRs for this repo and language\n- `@dependabot use these assignees` will set the current assignees as the default for future PRs for this repo and language\n- `@dependabot use this milestone` will set the current milestone as the default for future PRs for this repo and language\n- `@dependabot badge me` will comment on this PR with code to add a \"Dependabot enabled\" badge to your readme\n\nAdditionally, you can set the following in your Dependabot [dashboard](https://app.dependabot.com):\n- Update frequency (including time of day and day of week)\n- Pull request limits (per update run and/or open at any time)\n- Automerge options (never/patch/minor, and dev/runtime dependencies)\n- Out-of-range updates (receive only lockfile updates, if desired)\n- Security updates (receive only security updates, if desired)\n\n\n\n</details>","created_at":"2021-02-01T05:23:27Z","updated_at":"2021-02-01T05:23:28Z","closed_at":null,"merged_at":null,"merge_commit_sha":"686d78a61b775c822ede64119cb9df82bf21c568","assignees":[],"requested_reviewers":[],"requested_teams":[],"labels":[{"id":1224325914,"node_id":"MDU6TGFiZWwxMjI0MzI1OTE0","url":"https://api.github.com/repos/src-d/lookout/labels/dependencies","name":"dependencies","color":"0025ff","default":false,"description":"Pull requests that update a dependency file"},{"id":1225436017,"node_id":"MDU6TGFiZWwxMjI1NDM2MDE3","url":"https://api.github.com/repos/src-d/lookout/labels/go","name":"go","color":"16e2e2","default":false,"description":"Pull requests that update Go code"}],"milestone":null,"draft":false,"commits_url":"https://api.github.com/repos/src-d/lookout/pulls/801/commits","review_comments_url":"https://api.github.com/repos/src-d/lookout/pulls/801/comments","review_comment_url":"https://api.github.com/repos/src-d/lookout/pulls/comments{/number}","comments_url":"https://api.github.com/repos/src-d/lookout/issues/801/comments","statuses_url":"https://api.github.com/repos/src-d/lookout/statuses/5b169fd6fc08f793a182a724cea9d6bacb8c5018","head":{"label":"src-d:dependabot/dep/github.com/stretchr/testify-1.7.0","ref":"dependabot/dep/github.com/stretchr/testify-1.7.0","sha":"5b169fd6fc08f793a182a724cea9d6bacb8c5018","user":{"login":"src-d","id":15128793,"node_id":"MDEyOk9yZ2FuaXphdGlvbjE1MTI4Nzkz","avatar_url":"https://avatars.githubusercontent.com/u/15128793?v=4","gravatar_id":"","url":"https://api.github.com/users/src-d","html_url":"https://github.com/src-d","followers_url":"https://api.github.com/users/src-d/followers","following_url":"https://api.github.com/users/src-d/following{/other_user}","gists_url":"https://api.github.com/users/src-d/gists{/gist_id}","starred_url":"https://api.github.com/users/src-d/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/src-d/subscriptions","organizations_url":"https://api.github.com/users/src-d/orgs","repos_url":"https://api.github.com/users/src-d/repos","events_url":"https://api.github.com/users/src-d/events{/privacy}","received_events_url":"https://api.github.com/users/src-d/received_events","type":"Organization","user_view_type":"public","site_admin":false},"repo":{"id":136146572,"node_id":"MDEwOlJlcG9zaXRvcnkxMzYxNDY1NzI=","name":"lookout","full_name":"src-d/lookout","private":false,"owner":{"login":"src-d","id":15128793,"node_id":"MDEyOk9yZ2FuaXphdGlvbjE1MTI4Nzkz","avatar_url":"https://avatars.githubusercontent.com/u/15128793?v=4","gravatar_id":"","url":"https://api.github.com/users/src-d","html_url":"https://github.com/src-d","followers_url":"https://api.github.com/users/src-d/followers","following_url":"https://api.github.com/users/src-d/following{/other_user}","gists_url":"https://api.github.com/users/src-d/gists{/gist_id}","starred_url":"https://api.github.com/users/src-d/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/src-d/subscriptions","organizations_url":"https://api.github.com/users/src-d/orgs","repos_url":"https://api.github.com/users/src-d/repos","events_url":"https://api.github.com/users/src-d/events{/privacy}","received_events_url":"https://api.github.com/users/src-d/received_events","type":"Organization","user_view_type":"public","site_admin":false},"html_url":"https://github.com/src-d/lookout","description":"Assisted code review, running custom code analyzers on pull requests","fork":false,"url":"https://api.github.com/repos/src-d/lookout","forks_url":"https://api.github.com/repos/src-d/lookout/forks","keys_url":"https://api.github.com/repos/src-d/lookout/keys{/key_id}","collaborators_url":"https://api.github.com/repos/src-d/lookout/collaborators{/collaborator}","teams_url":"https://api.github.com/repos/src-d/lookout/teams","hooks_url":"https://api.github.com/repos/src-d/lookout/hooks","issue_events_url":"https://api.github.com/repos/src-d/lookout/issues/events{/number}","events_url":"https://api.github.com/repos/src-d/lookout/events","assignees_url":"https://api.github.com/repos/src-d/lookout/assignees{/user}","branches_url":"https://api.github.com/repos/src-d/lookout/branches{/branch}","tags_url":"https://api.github.com/repos/src-d/lookout/tags","blobs_url":"https://api.github.com/repos/src-d/lookout/git/blobs{/sha}","git_tags_url":"https://api.github.com/repos/src-d/lookout/git/tags{/sha}","git_refs_url":"https://api.github.com/repos/src-d/lookout/git/refs{/sha}","trees_url":"https://api.github.com/repos/src-d/lookout/git/trees{/sha}","statuses_url":"https://api.github.com/repos/src-d/lookout/statuses/{sha}","languages_url":"https://api.github.com/repos/src-d/lookout/languages","stargazers_url":"https://api.github.com/repos/src-d/lookout/stargazers","contributors_url":"https://api.github.com/repos/src-d/lookout/contributors","subscribers_url":"https://api.github.com/repos/src-d/lookout/subscribers","subscription_url":"https://api.github.com/repos/src-d/lookout/subscription","commits_url":"https://api.github.com/repos/src-d/lookout/commits{/sha}","git_commits_url":"https://api.github.com/repos/src-d/lookout/git/commits{/sha}","comments_url":"https://api.github.com/repos/src-d/lookout/comments{/number}","issue_comment_url":"https://api.github.com/repos/src-d/lookout/issues/comments{/number}","contents_url":"https://api.github.com/repos/src-d/lookout/contents/{+path}","compare_url":"https://api.github.com/repos/src-d/lookout/compare/{base}...{head}","merges_url":"https://api.github.com/repos/src-d/lookout/merges","archive_url":"https://api.github.com/repos/src-d/lookout/{archive_format}{/ref}","downloads_url":"https://api.github.com/repos/src-d/lookout/downloads","issues_url":"https://api.github.com/repos/src-d/lookout/issues{/number}","pulls_url":"https://api.github.com/repos/src-d/lookout/pulls{/number}","milestones_url":"https://api.github.com/repos/src-d/lookout/milestones{/number}","notifications_url":"https://api.github.com/repos/src-d/lookout/notifications{?since,all,participating}","labels_url":"https://api.github.com/repos/src-d/lookout/labels{/name}","releases_url":"https://api.github.com/repos/src-d/lookout/releases{/id}","deployments_url":"https://api.github.com/repos/src-d/lookout/deployments","created_at":"2018-06-05T08:37:23Z","updated_at":"2025-10-05T17:39:33Z","pushed_at":"2021-08-03T19:18:36Z","git_url":"git://github.com/src-d/lookout.git","ssh_url":"git@github.com:src-d/lookout.git","clone_url":"https://github.com/src-d/lookout.git","svn_url":"https://github.com/src-d/lookout","homepage":"https://docs.sourced.tech/lookout","size":60130,"stargazers_count":152,"watchers_count":152,"language":"Go","has_issues":true,"has_projects":false,"has_downloads":true,"has_wiki":false,"has_pages":false,"has_discussions":false,"forks_count":33,"mirror_url":null,"archived":false,"disabled":false,"open_issues_count":84,"license":{"key":"agpl-3.0","name":"GNU Affero General Public License v3.0","spdx_id":"AGPL-3.0","url":"https://api.github.com/licenses/agpl-3.0","node_id":"MDc6TGljZW5zZTE="},"allow_forking":true,"is_template":false,"web_commit_signoff_required":false,"has_pull_requests":true,"pull_request_creation_policy":"all","topics":["code-review","github","lookout"],"visibility":"public","forks":33,"open_issues":84,"watchers":152,"default_branch":"master"}},"base":{"label":"src-d:master","ref":"master","sha":"d5cccd9aed531327965c374533f42e0469af4cda","user":{"login":"src-d","id":15128793,"node_id":"MDEyOk9yZ2FuaXphdGlvbjE1MTI4Nzkz","avatar_url":"https://avatars.githubusercontent.com/u/15128793?v=4","gravatar_id":"","url":"https://api.github.com/users/src-d","html_url":"https://github.com/src-d","followers_url":"https://api.github.com/users/src-d/followers","following_url":"https://api.github.com/users/src-d/following{/other_user}","gists_url":"https://api.github.com/users/src-d/gists{/gist_id}","starred_url":"https://api.github.com/users/src-d/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/src-d/subscriptions","organizations_url":"https://api.github.com/users/src-d/orgs","repos_url":"https://api.github.com/users/src-d/repos","events_url":"https://api.github.com/users/src-d/events{/privacy}","received_events_url":"https://api.github.com/users/src-d/received_events","type":"Organization","user_view_type":"public","site_admin":false},"repo":{"id":136146572,"node_id":"MDEwOlJlcG9zaXRvcnkxMzYxNDY1NzI=","name":"lookout","full_name":"src-d/lookout","private":false,"owner":{"login":"src-d","id":15128793,"node_id":"MDEyOk9yZ2FuaXphdGlvbjE1MTI4Nzkz","avatar_url":"https://avatars.githubusercontent.com/u/15128793?v=4","gravatar_id":"","url":"https://api.github.com/users/src-d","html_url":"https://github.com/src-d","followers_url":"https://api.github.com/users/src-d/followers","following_url":"https://api.github.com/users/src-d/following{/other_user}","gists_url":"https://api.github.com/users/src-d/gists{/gist_id}","starred_url":"https://api.github.com/users/src-d/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/src-d/subscriptions","organizations_url":"https://api.github.com/users/src-d/orgs","repos_url":"https://api.github.com/users/src-d/repos","events_url":"https://api.github.com/users/src-d/events{/privacy}","received_events_url":"https://api.github.com/users/src-d/received_events","type":"Organization","user_view_type":"public","site_admin":false},"html_url":"https://github.com/src-d/lookout","description":"Assisted code review, running custom code analyzers on pull requests","fork":false,"url":"https://api.github.com/repos/src-d/lookout","forks_url":"https://api.github.com/repos/src-d/lookout/forks","keys_url":"https://api.github.com/repos/src-d/lookout/keys{/key_id}","collaborators_url":"https://api.github.com/repos/src-d/lookout/collaborators{/collaborator}","teams_url":"https://api.github.com/repos/src-d/lookout/teams","hooks_url":"https://api.github.com/repos/src-d/lookout/hooks","issue_events_url":"https://api.github.com/repos/src-d/lookout/issues/events{/number}","events_url":"https://api.github.com/repos/src-d/lookout/events","assignees_url":"https://api.github.com/repos/src-d/lookout/assignees{/user}","branches_url":"https://api.github.com/repos/src-d/lookout/branches{/branch}","tags_url":"https://api.github.com/repos/src-d/lookout/tags","blobs_url":"https://api.github.com/repos/src-d/lookout/git/blobs{/sha}","git_tags_url":"https://api.github.com/repos/src-d/lookout/git/tags{/sha}","git_refs_url":"https://api.github.com/repos/src-d/lookout/git/refs{/sha}","trees_url":"https://api.github.com/repos/src-d/lookout/git/trees{/sha}","statuses_url":"https://api.github.com/repos/src-d/lookout/statuses/{sha}","languages_url":"https://api.github.com/repos/src-d/lookout/languages","stargazers_url":"https://api.github.com/repos/src-d/lookout/stargazers","contributors_url":"https://api.github.com/repos/src-d/lookout/contributors","subscribers_url":"https://api.github.com/repos/src-d/lookout/subscribers","subscription_url":"https://api.github.com/repos/src-d/lookout/subscription","commits_url":"https://api.github.com/repos/src-d/lookout/commits{/sha}","git_commits_url":"https://api.github.com/repos/src-d/lookout/git/commits{/sha}","comments_url":"https://api.github.com/repos/src-d/lookout/comments{/number}","issue_comment_url":"https://api.github.com/repos/src-d/lookout/issues/comments{/number}","contents_url":"https://api.github.com/repos/src-d/lookout/contents/{+path}","compare_url":"https://api.github.com/repos/src-d/lookout/compare/{base}...{head}","merges_url":"https://api.github.com/repos/src-d/lookout/merges","archive_url":"https://api.github.com/repos/src-d/lookout/{archive_format}{/ref}","downloads_url":"https://api.github.com/repos/src-d/lookout/downloads","issues_url":"https://api.github.com/repos/src-d/lookout/issues{/number}","pulls_url":"https://api.github.com/repos/src-d/lookout/pulls{/number}","milestones_url":"https://api.github.com/repos/src-d/lookout/milestones{/number}","notifications_url":"https://api.github.com/repos/src-d/lookout/notifications{?since,all,participating}","labels_url":"https://api.github.com/repos/src-d/lookout/labels{/name}","releases_url":"https://api.github.com/repos/src-d/lookout/releases{/id}","deployments_url":"https://api.github.com/repos/src-d/lookout/deployments","created_at":"2018-06-05T08:37:23Z","updated_at":"2025-10-05T17:39:33Z","pushed_at":"2021-08-03T19:18:36Z","git_url":"git://github.com/src-d/lookout.git","ssh_url":"git@github.com:src-d/lookout.git","clone_url":"https://github.com/src-d/lookout.git","svn_url":"https://github.com/src-d/lookout","homepage":"https://docs.sourced.tech/lookout","size":60130,"stargazers_count":152,"watchers_count":152,"language":"Go","has_issues":true,"has_projects":false,"has_downloads":true,"has_wiki":false,"has_pages":false,"has_discussions":false,"forks_count":33,"mirror_url":null,"archived":false,"disabled":false,"open_issues_count":84,"license":{"key":"agpl-3.0","name":"GNU Affero General Public License v3.0","spdx_id":"AGPL-3.0","url":"https://api.github.com/licenses/agpl-3.0","node_id":"MDc6TGljZW5zZTE="},"allow_forking":true,"is_template":false,"web_commit_signoff_required":false,"has_pull_requests":true,"pull_request_creation_policy":"all","topics":["code-review","github","lookout"],"visibility":"public","forks":33,"open_issues":84,"watchers":152,"default_branch":"master"}},"_links":{"self":{"href":"https://api.github.com/repos/src-d/lookout/pulls/801"},"html":{"href":"https://github.com/src-d/lookout/pull/801"},"issue":{"href":"https://api.github.com/repos/src-d/lookout/issues/801"},"comments":{"href":"https://api.github.com/repos/src-d/lookout/issues/801/comments"},"review_comments":{"href":"https://api.github.com/repos/src-d/lookout/pulls/801/comments"},"review_comment":{"href":"https://api.github.com/repos/src-d/lookout/pulls/comments{/number}"},"commits":{"href":"https://api.github.com/repos/src-d/lookout/pulls/801/commits"},"statuses":{"href":"https://api.github.com/repos/src-d/lookout/statuses/5b169fd6fc08f793a182a724cea9d6bacb8c5018"}},"author_association":"NONE","auto_merge":null,"assignee":null,"active_lock_reason":null},{"url":"https://api.github.com/repos/src-d/lookout/pulls/800","id":564851471,"node_id":"MDExOlB1bGxSZXF1ZXN0NTY0ODUxNDcx","html_url":"https://github.com/src-d/lookout/pull/800","diff_url":"https://github.com/src-d/lookout/pull/800.diff","patch_url":"https://github.com/src-d/lookout/pull/800.patch","issue_url":"https://api.github.com/repos/src-d/lookout/issues/800","number":800,"state":"open","locked":false,"title":"Bump github.com/gogo/protobuf from 1.2.1 to 1.3.2","user":{"login":"dependabot-preview[bot]","id":27856297,"node_id":"MDM6Qm90Mjc4NTYyOTc=","avatar_url":"https://avatars.githubusercontent.com/in/2141?v=4","gravatar_id":"","url":"https://api.github.com/users/dependabot-preview%5Bbot%5D","html_url":"https://github.com/apps/dependabot-preview","followers_url":"https://api.github.com/users/dependabot-preview%5Bbot%5D/followers","following_url":"https://api.github.com/users/dependabot-preview%5Bbot%5D/following{/other_user}","gists_url":"https://api.github.com/users/dependabot-preview%5Bbot%5D/gists{/gist_id}","starred_url":"https://api.github.com/users/dependabot-preview%5Bbot%5D/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/dependabot-preview%5Bbot%5D/subscriptions","organizations_url":"https://api.github.com/users/dependabot-preview%5Bbot%5D/orgs","repos_url":"https://api.github.com/users/dependabot-preview%5Bbot%5D/repos","events_url":"https://api.github.com/users/dependabot-preview%5Bbot%5D/events{/privacy}","received_events_url":"https://api.github.com/users/dependabot-preview%5Bbot%5D/received_events","type":"Bot","user_view_type":"public","site_admin":false},"body":"Bumps [github.com/gogo/protobuf](https://github.com/gogo/protobuf) from 1.2.1 to 1.3.2.\n<details>\n<summary>Release notes</summary>\n<p><em>Sourced from <a href=\"https://github.com/gogo/protobuf/releases\">github.com/gogo/protobuf's releases</a>.</em></p>\n<blockquote>\n<h2>Release v.1.3.2</h2>\n<h2>Tested versions:</h2>\n<p>go 1.15.6\nprotoc 3.14.0</p>\n<h2>Bug fixes:</h2>\n<p>skippy peanut butter</p>\n<h2>Release v1.3.1</h2>\n<h4>Tested versions:</h4>\n<p>go 1.12.10\nprotoc 3.9.1</p>\n<h2>Bug fixes:</h2>\n<ul>\n<li>proto/buffer: fix proto.Buffer marshaling.\n<ul>\n<li>Thanks: <a href=\"https://github.com/apelisse\">https://github.com/apelisse</a></li>\n</ul>\n</li>\n<li>plugin/gostring: generate values instead of pointers when a field is repeated and non-nullable.\n<ul>\n<li>Thanks <a href=\"https://github.com/godfried\">https://github.com/godfried</a></li>\n</ul>\n</li>\n<li>protoc-gen-gogo/generator: Generate json and custom tags for oneof\n<ul>\n<li>Thanks: <a href=\"https://github.com/krhubert\">https://github.com/krhubert</a></li>\n</ul>\n</li>\n<li>plugin/marshalto: Use ProtoSize() in MarshalTo when enabled for oneof fields.\n<ul>\n<li>Thanks: <a href=\"https://github.com/gaffneyc\">https://github.com/gaffneyc</a></li>\n</ul>\n</li>\n</ul>\n<h2>Upstream commits:</h2>\n<ul>\n<li>4c88cc3f1a34ffade77b79abc53335d1e511f25b - all: fix reflect.Value.Interface races.</li>\n<li>6c65a5562fc06764971b7c5d05c76c75e84bdbf7 -  jsonpb: fix marshaling of Duration</li>\n<li>b285ee9cfc6c881bb20c0d8dc73370ea9b9ec90f - Log parsing errors using log pkg</li>\n</ul>\n<h2>Misc:</h2>\n<ul>\n<li>add github workflow config</li>\n<li>protoc update - Updated to protoc 3.9.1</li>\n</ul>\n<h2>Release v1.3.0</h2>\n<h4>Tested versions:</h4>\n<p>go 1.12.9\nprotoc 3.7.1</p>\n<h2>Improvements:</h2>\n<ul>\n<li>plugin/stringer - Handle repeated and/or nullable types a bit better now.</li>\n<li>plugin/size - Remove the loop in sovXXX by using bit twiddling.\n<ul>\n<li>Thanks: <a href=\"https://github.com/apelisse\">https://github.com/apelisse</a></li>\n</ul>\n</li>\n<li>plugin/marshalto - Implemented a reverse marshal strategy which allows for faster marshalling. This now avoids a recursive (and repeated) call to Size().\n<ul>\n<li>Thanks: <a href=\"https://github.com/apelisse\">https://github.com/apelisse</a></li>\n</ul>\n</li>\n<li>plugin/compare - Added support for for oneof types.</li>\n</ul>\n<h2>Bug fixes:</h2>\n<ul>\n<li>protoc-gen-gogo/generator - Fix assignment to entry in nil map.\n<ul>\n<li>Thanks: <a href=\"https://github.com/tgulacsi\">https://github.com/tgulacsi</a></li>\n</ul>\n</li>\n<li>protoc-gen-gogo/generator - Allows plugins to call RecordTypeUse without panicking.\n<ul>\n<li>Thanks: <a href=\"https://github.com/fedenusy\">https://github.com/fedenusy</a></li>\n</ul>\n</li>\n</ul>\n<!-- raw HTML omitted -->\n</blockquote>\n<p>... (truncated)</p>\n</details>\n<details>\n<summary>Commits</summary>\n<ul>\n<li><a href=\"https://github.com/gogo/protobuf/commit/b03c65ea87cdc3521ede29f62fe3ce239267c1bc\"><code>b03c65e</code></a> skippy peanut butter</li>\n<li><a href=\"https://github.com/gogo/protobuf/commit/550e88954e617545f49920b752c154d72abf1d8d\"><code>550e889</code></a> update to go version 1.15.6 and protoc 3.14.0 (<a href=\"https://github-redirect.dependabot.com/gogo/protobuf/issues/717\">#717</a>)</li>\n<li><a href=\"https://github.com/gogo/protobuf/commit/deb6fe8ca7c6d06584bfbd40ca407bf69d9fd2aa\"><code>deb6fe8</code></a> Update Readme.md</li>\n<li><a href=\"https://github.com/gogo/protobuf/commit/5628607bb4c51c3157aacc3a50f0ab707582b805\"><code>5628607</code></a> github/workflow - update protoc version to 3.9.1 (<a href=\"https://github-redirect.dependabot.com/gogo/protobuf/issues/637\">#637</a>)</li>\n<li><a href=\"https://github.com/gogo/protobuf/commit/09ab7735f7757c093f5b0a2285bff3998d684a61\"><code>09ab773</code></a> Issue619safer (<a href=\"https://github-redirect.dependabot.com/gogo/protobuf/issues/627\">#627</a>)</li>\n<li><a href=\"https://github.com/gogo/protobuf/commit/8142193b881b41b9b93dae1124dd99e619b8941f\"><code>8142193</code></a> GoString plugin: generate values instead of pointers when a field is repeated...</li>\n<li><a href=\"https://github.com/gogo/protobuf/commit/627c0c9b4094c6cd02b3cb49e22420455e97e64c\"><code>627c0c9</code></a> umarshal - refactor skip from recursive calls to a loop. (<a href=\"https://github-redirect.dependabot.com/gogo/protobuf/issues/636\">#636</a>)</li>\n<li><a href=\"https://github.com/gogo/protobuf/commit/69adf3ecd52d1754cc42d7464c449e50d4b79521\"><code>69adf3e</code></a> Ghworkflow (<a href=\"https://github-redirect.dependabot.com/gogo/protobuf/issues/632\">#632</a>)</li>\n<li><a href=\"https://github.com/gogo/protobuf/commit/8a5ed79f688836cf007ca23aefe0299791e7bea5\"><code>8a5ed79</code></a> Merge pull request <a href=\"https://github-redirect.dependabot.com/gogo/protobuf/issues/622\">#622</a> from jmarais/master</li>\n<li><a href=\"https://github.com/gogo/protobuf/commit/33d47608f2cc12f4c1e590655e6175596f05e6bf\"><code>33d4760</code></a> merged in golang/protobuf commit 4c88cc3f1a34ffade77b79abc53335d1e511f25b - a...</li>\n<li>Additional commits viewable in <a href=\"https://github.com/gogo/protobuf/compare/v1.2.1...v1.3.2\">compare view</a></li>\n</ul>\n</details>\n<br />\n\n\n[![Dependabot compatibility score](https://api.dependabot.com/badges/compatibility_score?dependency-name=github.com/gogo/protobuf&package-manager=dep&previous-version=1.2.1&new-version=1.3.2)](https://dependabot.com/compatibility-score/?dependency-name=github.com/gogo/protobuf&package-manager=dep&previous-version=1.2.1&new-version=1.3.2)\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n<details>\n<summary>Dependabot commands and options</summary>\n<br />\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot merge` will merge this PR after your CI passes on it\n- `@dependabot squash and merge` will squash and merge this PR after your CI passes on it\n- `@dependabot cancel merge` will cancel a previously requested merge and block automerging\n- `@dependabot reopen` will reopen this PR if it is closed\n- `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually\n- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot use these labels` will set the current labels as the default for future PRs for this repo and language\n- `@dependabot use these reviewers` will set the current reviewers as the default for future PRs for this repo and language\n- `@dependabot use these assignees` will set the current assignees as the default for future PRs for this repo and language\n- `@dependabot use this milestone` will set the current milestone as the default for future PRs for this repo and language\n- `@dependabot badge me` will comment on this PR with code to add a \"Dependabot enabled\" badge to your readme\n\nAdditionally, you can set the following in your Dependabot [dashboard](https://app.dependabot.com):\n- Update frequency (including time of day and day of week)\n- Pull request limits (per update run and/or open at any time)\n- Automerge options (never/patch/minor, and dev/runtime dependencies)\n- Out-of-range updates (receive only lockfile updates, if desired)\n- Security updates (receive only security updates, if desired)\n\n\n\n</details>","created_at":"2021-02-01T05:16:54Z","updated_at":"2021-02-01T05:16:55Z","closed_at":null,"merged_at":null,"merge_commit_sha":"542a54e039fb427a9f16a16165c50c85bd588563","assignees":[],"requested_reviewers":[],"requested_teams":[],"labels":[{"id":1224325914,"node_id":"MDU6TGFiZWwxMjI0MzI1OTE0","url":"https://api.github.com/repos/src-d/lookout/labels/dependencies","name":"dependencies","color":"0025ff","default":false,"description":"Pull requests that update a dependency file"},{"id":1225436017,"node_id":"MDU6TGFiZWwxMjI1NDM2MDE3","url":"https://api.github.com/repos/src-d/lookout/labels/go","name":"go","color":"16e2e2","default":false,"description":"Pull requests that update Go code"}],"milestone":null,"draft":false,"commits_url":"https://api.github.com/repos/src-d/lookout/pulls/800/commits","review_comments_url":"https://api.github.com/repos/src-d/lookout/pulls/800/comments","review_comment_url":"https://api.github.com/repos/src-d/lookout/pulls/comments{/number}","comments_url":"https://api.github.com/repos/src-d/lookout/issues/800/comments","statuses_url":"https://api.github.com/repos/src-d/lookout/statuses/330b1298c537bace72f475e4efbc3a82648b70f3","head":{"label":"src-d:dependabot/dep/github.com/gogo/protobuf-1.3.2","ref":"dependabot/dep/github.com/gogo/protobuf-1.3.2","sha":"330b1298c537bace72f475e4efbc3a82648b70f3","user":{"login":"src-d","id":15128793,"node_id":"MDEyOk9yZ2FuaXphdGlvbjE1MTI4Nzkz","avatar_url":"https://avatars.githubusercontent.com/u/15128793?v=4","gravatar_id":"","url":"https://api.github.com/users/src-d","html_url":"https://github.com/src-d","followers_url":"https://api.github.com/users/src-d/followers","following_url":"https://api.github.com/users/src-d/following{/other_user}","gists_url":"https://api.github.com/users/src-d/gists{/gist_id}","starred_url":"https://api.github.com/users/src-d/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/src-d/subscriptions","organizations_url":"https://api.github.com/users/src-d/orgs","repos_url":"https://api.github.com/users/src-d/repos","events_url":"https://api.github.com/users/src-d/events{/privacy}","received_events_url":"https://api.github.com/users/src-d/received_events","type":"Organization","user_view_type":"public","site_admin":false},"repo":{"id":136146572,"node_id":"MDEwOlJlcG9zaXRvcnkxMzYxNDY1NzI=","name":"lookout","full_name":"src-d/lookout","private":false,"owner":{"login":"src-d","id":15128793,"node_id":"MDEyOk9yZ2FuaXphdGlvbjE1MTI4Nzkz","avatar_url":"https://avatars.githubusercontent.com/u/15128793?v=4","gravatar_id":"","url":"https://api.github.com/users/src-d","html_url":"https://github.com/src-d","followers_url":"https://api.github.com/users/src-d/followers","following_url":"https://api.github.com/users/src-d/following{/other_user}","gists_url":"https://api.github.com/users/src-d/gists{/gist_id}","starred_url":"https://api.github.com/users/src-d/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/src-d/subscriptions","organizations_url":"https://api.github.com/users/src-d/orgs","repos_url":"https://api.github.com/users/src-d/repos","events_url":"https://api.github.com/users/src-d/events{/privacy}","received_events_url":"https://api.github.com/users/src-d/received_events","type":"Organization","user_view_type":"public","site_admin":false},"html_url":"https://github.com/src-d/lookout","description":"Assisted code review, running custom code analyzers on pull requests","fork":false,"url":"https://api.github.com/repos/src-d/lookout","forks_url":"https://api.github.com/repos/src-d/lookout/forks","keys_url":"https://api.github.com/repos/src-d/lookout/keys{/key_id}","collaborators_url":"https://api.github.com/repos/src-d/lookout/collaborators{/collaborator}","teams_url":"https://api.github.com/repos/src-d/lookout/teams","hooks_url":"https://api.github.com/repos/src-d/lookout/hooks","issue_events_url":"https://api.github.com/repos/src-d/lookout/issues/events{/number}","events_url":"https://api.github.com/repos/src-d/lookout/events","assignees_url":"https://api.github.com/repos/src-d/lookout/assignees{/user}","branches_url":"https://api.github.com/repos/src-d/lookout/branches{/branch}","tags_url":"https://api.github.com/repos/src-d/lookout/tags","blobs_url":"https://api.github.com/repos/src-d/lookout/git/blobs{/sha}","git_tags_url":"https://api.github.com/repos/src-d/lookout/git/tags{/sha}","git_refs_url":"https://api.github.com/repos/src-d/lookout/git/refs{/sha}","trees_url":"https://api.github.com/repos/src-d/lookout/git/trees{/sha}","statuses_url":"https://api.github.com/repos/src-d/lookout/statuses/{sha}","languages_url":"https://api.github.com/repos/src-d/lookout/languages","stargazers_url":"https://api.github.com/repos/src-d/lookout/stargazers","contributors_url":"https://api.github.com/repos/src-d/lookout/contributors","subscribers_url":"https://api.github.com/repos/src-d/lookout/subscribers","subscription_url":"https://api.github.com/repos/src-d/lookout/subscription","commits_url":"https://api.github.com/repos/src-d/lookout/commits{/sha}","git_commits_url":"https://api.github.com/repos/src-d/lookout/git/commits{/sha}","comments_url":"https://api.github.com/repos/src-d/lookout/comments{/number}","issue_comment_url":"https://api.github.com/repos/src-d/lookout/issues/comments{/number}","contents_url":"https://api.github.com/repos/src-d/lookout/contents/{+path}","compare_url":"https://api.github.com/repos/src-d/lookout/compare/{base}...{head}","merges_url":"https://api.github.com/repos/src-d/lookout/merges","archive_url":"https://api.github.com/repos/src-d/lookout/{archive_format}{/ref}","downloads_url":"https://api.github.com/repos/src-d/lookout/downloads","issues_url":"https://api.github.com/repos/src-d/lookout/issues{/number}","pulls_url":"https://api.github.com/repos/src-d/lookout/pulls{/number}","milestones_url":"https://api.github.com/repos/src-d/lookout/milestones{/number}","notifications_url":"https://api.github.com/repos/src-d/lookout/notifications{?since,all,participating}","labels_url":"https://api.github.com/repos/src-d/lookout/labels{/name}","releases_url":"https://api.github.com/repos/src-d/lookout/releases{/id}","deployments_url":"https://api.github.com/repos/src-d/lookout/deployments","created_at":"2018-06-05T08:37:23Z","updated_at":"2025-10-05T17:39:33Z","pushed_at":"2021-08-03T19:18:36Z","git_url":"git://github.com/src-d/lookout.git","ssh_url":"git@github.com:src-d/lookout.git","clone_url":"https://github.com/src-d/lookout.git","svn_url":"https://github.com/src-d/lookout","homepage":"https://docs.sourced.tech/lookout","size":60130,"stargazers_count":152,"watchers_count":152,"language":"Go","has_issues":true,"has_projects":false,"has_downloads":true,"has_wiki":false,"has_pages":false,"has_discussions":false,"forks_count":33,"mirror_url":null,"archived":false,"disabled":false,"open_issues_count":84,"license":{"key":"agpl-3.0","name":"GNU Affero General Public License v3.0","spdx_id":"AGPL-3.0","url":"https://api.github.com/licenses/agpl-3.0","node_id":"MDc6TGljZW5zZTE="},"allow_forking":true,"is_template":false,"web_commit_signoff_required":false,"has_pull_requests":true,"pull_request_creation_policy":"all","topics":["code-review","github","lookout"],"visibility":"public","forks":33,"open_issues":84,"watchers":152,"default_branch":"master"}},"base":{"label":"src-d:master","ref":"master","sha":"d5cccd9aed531327965c374533f42e0469af4cda","user":{"login":"src-d","id":15128793,"node_id":"MDEyOk9yZ2FuaXphdGlvbjE1MTI4Nzkz","avatar_url":"https://avatars.githubusercontent.com/u/15128793?v=4","gravatar_id":"","url":"https://api.github.com/users/src-d","html_url":"https://github.com/src-d","followers_url":"https://api.github.com/users/src-d/followers","following_url":"https://api.github.com/users/src-d/following{/other_user}","gists_url":"https://api.github.com/users/src-d/gists{/gist_id}","starred_url":"https://api.github.com/users/src-d/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/src-d/subscriptions","organizations_url":"https://api.github.com/users/src-d/orgs","repos_url":"https://api.github.com/users/src-d/repos","events_url":"https://api.github.com/users/src-d/events{/privacy}","received_events_url":"https://api.github.com/users/src-d/received_events","type":"Organization","user_view_type":"public","site_admin":false},"repo":{"id":136146572,"node_id":"MDEwOlJlcG9zaXRvcnkxMzYxNDY1NzI=","name":"lookout","full_name":"src-d/lookout","private":false,"owner":{"login":"src-d","id":15128793,"node_id":"MDEyOk9yZ2FuaXphdGlvbjE1MTI4Nzkz","avatar_url":"https://avatars.githubusercontent.com/u/15128793?v=4","gravatar_id":"","url":"https://api.github.com/users/src-d","html_url":"https://github.com/src-d","followers_url":"https://api.github.com/users/src-d/followers","following_url":"https://api.github.com/users/src-d/following{/other_user}","gists_url":"https://api.github.com/users/src-d/gists{/gist_id}","starred_url":"https://api.github.com/users/src-d/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/src-d/subscriptions","organizations_url":"https://api.github.com/users/src-d/orgs","repos_url":"https://api.github.com/users/src-d/repos","events_url":"https://api.github.com/users/src-d/events{/privacy}","received_events_url":"https://api.github.com/users/src-d/received_events","type":"Organization","user_view_type":"public","site_admin":false},"html_url":"https://github.com/src-d/lookout","description":"Assisted code review, running custom code analyzers on pull requests","fork":false,"url":"https://api.github.com/repos/src-d/lookout","forks_url":"https://api.github.com/repos/src-d/lookout/forks","keys_url":"https://api.github.com/repos/src-d/lookout/keys{/key_id}","collaborators_url":"https://api.github.com/repos/src-d/lookout/collaborators{/collaborator}","teams_url":"https://api.github.com/repos/src-d/lookout/teams","hooks_url":"https://api.github.com/repos/src-d/lookout/hooks","issue_events_url":"https://api.github.com/repos/src-d/lookout/issues/events{/number}","events_url":"https://api.github.com/repos/src-d/lookout/events","assignees_url":"https://api.github.com/repos/src-d/lookout/assignees{/user}","branches_url":"https://api.github.com/repos/src-d/lookout/branches{/branch}","tags_url":"https://api.github.com/repos/src-d/lookout/tags","blobs_url":"https://api.github.com/repos/src-d/lookout/git/blobs{/sha}","git_tags_url":"https://api.github.com/repos/src-d/lookout/git/tags{/sha}","git_refs_url":"https://api.github.com/repos/src-d/lookout/git/refs{/sha}","trees_url":"https://api.github.com/repos/src-d/lookout/git/trees{/sha}","statuses_url":"https://api.github.com/repos/src-d/lookout/statuses/{sha}","languages_url":"https://api.github.com/repos/src-d/lookout/languages","stargazers_url":"https://api.github.com/repos/src-d/lookout/stargazers","contributors_url":"https://api.github.com/repos/src-d/lookout/contributors","subscribers_url":"https://api.github.com/repos/src-d/lookout/subscribers","subscription_url":"https://api.github.com/repos/src-d/lookout/subscription","commits_url":"https://api.github.com/repos/src-d/lookout/commits{/sha}","git_commits_url":"https://api.github.com/repos/src-d/lookout/git/commits{/sha}","comments_url":"https://api.github.com/repos/src-d/lookout/comments{/number}","issue_comment_url":"https://api.github.com/repos/src-d/lookout/issues/comments{/number}","contents_url":"https://api.github.com/repos/src-d/lookout/contents/{+path}","compare_url":"https://api.github.com/repos/src-d/lookout/compare/{base}...{head}","merges_url":"https://api.github.com/repos/src-d/lookout/merges","archive_url":"https://api.github.com/repos/src-d/lookout/{archive_format}{/ref}","downloads_url":"https://api.github.com/repos/src-d/lookout/downloads","issues_url":"https://api.github.com/repos/src-d/lookout/issues{/number}","pulls_url":"https://api.github.com/repos/src-d/lookout/pulls{/number}","milestones_url":"https://api.github.com/repos/src-d/lookout/milestones{/number}","notifications_url":"https://api.github.com/repos/src-d/lookout/notifications{?since,all,participating}","labels_url":"https://api.github.com/repos/src-d/lookout/labels{/name}","releases_url":"https://api.github.com/repos/src-d/lookout/releases{/id}","deployments_url":"https://api.github.com/repos/src-d/lookout/deployments","created_at":"2018-06-05T08:37:23Z","updated_at":"2025-10-05T17:39:33Z","pushed_at":"2021-08-03T19:18:36Z","git_url":"git://github.com/src-d/lookout.git","ssh_url":"git@github.com:src-d/lookout.git","clone_url":"https://github.com/src-d/lookout.git","svn_url":"https://github.com/src-d/lookout","homepage":"https://docs.sourced.tech/lookout","size":60130,"stargazers_count":152,"watchers_count":152,"language":"Go","has_issues":true,"has_projects":false,"has_downloads":true,"has_wiki":false,"has_pages":false,"has_discussions":false,"forks_count":33,"mirror_url":null,"archived":false,"disabled":false,"open_issues_count":84,"license":{"key":"agpl-3.0","name":"GNU Affero General Public License v3.0","spdx_id":"AGPL-3.0","url":"https://api.github.com/licenses/agpl-3.0","node_id":"MDc6TGljZW5zZTE="},"allow_forking":true,"is_template":false,"web_commit_signoff_required":false,"has_pull_requests":true,"pull_request_creation_policy":"all","topics":["code-review","github","lookout"],"visibility":"public","forks":33,"open_issues":84,"watchers":152,"default_branch":"master"}},"_links":{"self":{"href":"https://api.github.com/repos/src-d/lookout/pulls/800"},"html":{"href":"https://github.com/src-d/lookout/pull/800"},"issue":{"href":"https://api.github.com/repos/src-d/lookout/issues/800"},"comments":{"href":"https://api.github.com/repos/src-d/lookout/issues/800/comments"},"review_comments":{"href":"https://api.github.com/repos/src-d/lookout/pulls/800/comments"},"review_comment":{"href":"https://api.github.com/repos/src-d/lookout/pulls/comments{/number}"},"commits":{"href":"https://api.github.com/repos/src-d/lookout/pulls/800/commits"},"statuses":{"href":"https://api.github.com/repos/src-d/lookout/statuses/330b1298c537bace72f475e4efbc3a82648b70f3"}},"author_association":"NONE","auto_merge":null,"assignee":null,"active_lock_reason":null},{"url":"https://api.github.com/repos/src-d/lookout/pulls/794","id":547553322,"node_id":"MDExOlB1bGxSZXF1ZXN0NTQ3NTUzMzIy","html_url":"https://github.com/src-d/lookout/pull/794","diff_url":"https://github.com/src-d/lookout/pull/794.diff","patch_url":"https://github.com/src-d/lookout/pull/794.patch","issue_url":"https://api.github.com/repos/src-d/lookout/issues/794","number":794,"state":"open","locked":false,"title":"[Security] Bump ini from 1.3.5 to 1.3.8 in /frontend","user":{"login":"dependabot-preview[bot]","id":27856297,"node_id":"MDM6Qm90Mjc4NTYyOTc=","avatar_url":"https://avatars.githubusercontent.com/in/2141?v=4","gravatar_id":"","url":"https://api.github.com/users/dependabot-preview%5Bbot%5D","html_url":"https://github.com/apps/dependabot-preview","followers_url":"https://api.github.com/users/dependabot-preview%5Bbot%5D/followers","following_url":"https://api.github.com/users/dependabot-preview%5Bbot%5D/following{/other_user}","gists_url":"https://api.github.com/users/dependabot-preview%5Bbot%5D/gists{/gist_id}","starred_url":"https://api.github.com/users/dependabot-preview%5Bbot%5D/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/dependabot-preview%5Bbot%5D/subscriptions","organizations_url":"https://api.github.com/users/dependabot-preview%5Bbot%5D/orgs","repos_url":"https://api.github.com/users/dependabot-preview%5Bbot%5D/repos","events_url":"https://api.github.com/users/dependabot-preview%5Bbot%5D/events{/privacy}","received_events_url":"https://api.github.com/users/dependabot-preview%5Bbot%5D/received_events","type":"Bot","user_view_type":"public","site_admin":false},"body":"Bumps [ini](https://github.com/isaacs/ini) from 1.3.5 to 1.3.8. **This update includes security fixes.**\n<details>\n<summary>Vulnerabilities fixed</summary>\n<p><em>Sourced from <a href=\"https://github.com/advisories/GHSA-qqgx-2p2h-9c37\">The GitHub Security Advisory Database</a>.</em></p>\n<blockquote>\n<p><strong>Prototype Pollution</strong></p>\n<h3>Overview</h3>\n<p>The <code>ini</code> npm package before version 1.3.6 has a Prototype Pollution vulnerability.</p>\n<p>If an attacker submits a malicious INI file to an application that parses it with <code>ini.parse</code>, they will pollute the prototype on the application. This can be exploited further depending on the context.</p>\n<h3>Patches</h3>\n<p>This has been patched in 1.3.6</p>\n<h3>Steps to reproduce</h3>\n<p>payload.ini</p>\n<pre><code>[__proto__]\npolluted = &quot;polluted&quot;\n</code></pre>\n<p>poc.js:</p>\n<pre><code>var fs = require('fs')\n&lt;/tr&gt;&lt;/table&gt; ... (truncated)\n<p>Affected versions: &lt; 1.3.6\n</code></pre></p>\n</blockquote>\n<p><em>Sourced from <a href=\"https://github.com/advisories/GHSA-qqgx-2p2h-9c37\">The GitHub Security Advisory Database</a>.</em></p>\n<blockquote>\n<p><strong>Prototype Pollution</strong></p>\n<h3>Overview</h3>\n<p>The <code>ini</code> npm package before version 1.3.6 has a Prototype Pollution vulnerability.</p>\n<p>If an attacker submits a malicious INI file to an application that parses it with <code>ini.parse</code>, they will pollute the prototype on the application. This can be exploited further depending on the context.</p>\n<h3>Patches</h3>\n<p>This has been patched in 1.3.6</p>\n<h3>Steps to reproduce</h3>\n<p>payload.ini</p>\n<pre><code>[__proto__]\npolluted = &quot;polluted&quot;\n</code></pre>\n<p>poc.js:</p>\n<pre><code>var fs = require('fs')\n&lt;/tr&gt;&lt;/table&gt; ... (truncated)\n<p>Affected versions: &lt; 1.3.6\n</code></pre></p>\n</blockquote>\n</details>\n<details>\n<summary>Commits</summary>\n<ul>\n<li><a href=\"https://github.com/npm/ini/commit/a2c5da86604bc2238fe393c5ff083bf23a9910eb\"><code>a2c5da8</code></a> 1.3.8</li>\n<li><a href=\"https://github.com/npm/ini/commit/af5c6bb5dca6f0248c153aa87e25bddfc515ff6e\"><code>af5c6bb</code></a> Do not use Object.create(null)</li>\n<li><a href=\"https://github.com/npm/ini/commit/8b648a1ac49e1b3b7686ea957e0b95e544bc6ec1\"><code>8b648a1</code></a> don't test where our devdeps don't even work</li>\n<li><a href=\"https://github.com/npm/ini/commit/c74c8af35f32b801a7e82a8309eab792a95932f6\"><code>c74c8af</code></a> 1.3.7</li>\n<li><a href=\"https://github.com/npm/ini/commit/024b8b55ac1c980c6225607b007714c54eb501ba\"><code>024b8b5</code></a> update deps, add linting</li>\n<li><a href=\"https://github.com/npm/ini/commit/032fbaf5f0b98fce70c8cc380e0d05177a9c9073\"><code>032fbaf</code></a> Use Object.create(null) to avoid default object property hazards</li>\n<li><a href=\"https://github.com/npm/ini/commit/2da90391ef70db41d10f013e3a87f9a8c5d01a72\"><code>2da9039</code></a> 1.3.6</li>\n<li><a href=\"https://github.com/npm/ini/commit/cfea636f534b5ca7550d2c28b7d1a95d936d56c6\"><code>cfea636</code></a> better git push script, before publish instead of after</li>\n<li><a href=\"https://github.com/npm/ini/commit/56d2805e07ccd94e2ba0984ac9240ff02d44b6f1\"><code>56d2805</code></a> do not allow invalid hazardous string as section name</li>\n<li>See full diff in <a href=\"https://github.com/isaacs/ini/compare/v1.3.5...v1.3.8\">compare view</a></li>\n</ul>\n</details>\n<details>\n<summary>Maintainer changes</summary>\n<p>This version was pushed to npm by <a href=\"https://www.npmjs.com/~isaacs\">isaacs</a>, a new releaser for ini since your current version.</p>\n</details>\n<br />\n\n\n[![Dependabot compatibility score](https://api.dependabot.com/badges/compatibility_score?dependency-name=ini&package-manager=npm_and_yarn&previous-version=1.3.5&new-version=1.3.8)](https://dependabot.com/compatibility-score/?dependency-name=ini&package-manager=npm_and_yarn&previous-version=1.3.5&new-version=1.3.8)\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n<details>\n<summary>Dependabot commands and options</summary>\n<br />\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot merge` will merge this PR after your CI passes on it\n- `@dependabot squash and merge` will squash and merge this PR after your CI passes on it\n- `@dependabot cancel merge` will cancel a previously requested merge and block automerging\n- `@dependabot reopen` will reopen this PR if it is closed\n- `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually\n- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot use these labels` will set the current labels as the default for future PRs for this repo and language\n- `@dependabot use these reviewers` will set the current reviewers as the default for future PRs for this repo and language\n- `@dependabot use these assignees` will set the current assignees as the default for future PRs for this repo and language\n- `@dependabot use this milestone` will set the current milestone as the default for future PRs for this repo and language\n- `@dependabot badge me` will comment on this PR with code to add a \"Dependabot enabled\" badge to your readme\n\nAdditionally, you can set the following in your Dependabot [dashboard](https://app.dependabot.com):\n- Update frequency (including time of day and day of week)\n- Pull request limits (per update run and/or open at any time)\n- Automerge options (never/patch/minor, and dev/runtime dependencies)\n- Out-of-range updates (receive only lockfile updates, if desired)\n- Security updates (receive only security updates, if desired)\n\n\n\n</details>","created_at":"2021-01-01T04:53:51Z","updated_at":"2021-01-01T04:53:52Z","closed_at":null,"merged_at":null,"merge_commit_sha":"c82139bef10ee922852724fff8da90af2063bf35","assignees":[],"requested_reviewers":[],"requested_teams":[],"labels":[{"id":1224325914,"node_id":"MDU6TGFiZWwxMjI0MzI1OTE0","url":"https://api.github.com/repos/src-d/lookout/labels/dependencies","name":"dependencies","color":"0025ff","default":false,"description":"Pull requests that update a dependency file"},{"id":1225416698,"node_id":"MDU6TGFiZWwxMjI1NDE2Njk4","url":"https://api.github.com/repos/src-d/lookout/labels/javascript","name":"javascript","color":"168700","default":false,"description":"Pull requests that update Javascript code"},{"id":1445656551,"node_id":"MDU6TGFiZWwxNDQ1NjU2NTUx","url":"https://api.github.com/repos/src-d/lookout/labels/security","name":"security","color":"ee0701","default":false,"description":"Pull requests that address a security vulnerability"}],"milestone":null,"draft":false,"commits_url":"https://api.github.com/repos/src-d/lookout/pulls/794/commits","review_comments_url":"https://api.github.com/repos/src-d/lookout/pulls/794/comments","review_comment_url":"https://api.github.com/repos/src-d/lookout/pulls/comments{/number}","comments_url":"https://api.github.com/repos/src-d/lookout/issues/794/comments","statuses_url":"https://api.github.com/repos/src-d/lookout/statuses/1638dd4b4e52ddf14888fdbeb7a1809d60cb10a9","head":{"label":"src-d:dependabot/npm_and_yarn/frontend/ini-1.3.8","ref":"dependabot/npm_and_yarn/frontend/ini-1.3.8","sha":"1638dd4b4e52ddf14888fdbeb7a1809d60cb10a9","user":{"login":"src-d","id":15128793,"node_id":"MDEyOk9yZ2FuaXphdGlvbjE1MTI4Nzkz","avatar_url":"https://avatars.githubusercontent.com/u/15128793?v=4","gravatar_id":"","url":"https://api.github.com/users/src-d","html_url":"https://github.com/src-d","followers_url":"https://api.github.com/users/src-d/followers","following_url":"https://api.github.com/users/src-d/following{/other_user}","gists_url":"https://api.github.com/users/src-d/gists{/gist_id}","starred_url":"https://api.github.com/users/src-d/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/src-d/subscriptions","organizations_url":"https://api.github.com/users/src-d/orgs","repos_url":"https://api.github.com/users/src-d/repos","events_url":"https://api.github.com/users/src-d/events{/privacy}","received_events_url":"https://api.github.com/users/src-d/received_events","type":"Organization","user_view_type":"public","site_admin":false},"repo":{"id":136146572,"node_id":"MDEwOlJlcG9zaXRvcnkxMzYxNDY1NzI=","name":"lookout","full_name":"src-d/lookout","private":false,"owner":{"login":"src-d","id":15128793,"node_id":"MDEyOk9yZ2FuaXphdGlvbjE1MTI4Nzkz","avatar_url":"https://avatars.githubusercontent.com/u/15128793?v=4","gravatar_id":"","url":"https://api.github.com/users/src-d","html_url":"https://github.com/src-d","followers_url":"https://api.github.com/users/src-d/followers","following_url":"https://api.github.com/users/src-d/following{/other_user}","gists_url":"https://api.github.com/users/src-d/gists{/gist_id}","starred_url":"https://api.github.com/users/src-d/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/src-d/subscriptions","organizations_url":"https://api.github.com/users/src-d/orgs","repos_url":"https://api.github.com/users/src-d/repos","events_url":"https://api.github.com/users/src-d/events{/privacy}","received_events_url":"https://api.github.com/users/src-d/received_events","type":"Organization","user_view_type":"public","site_admin":false},"html_url":"https://github.com/src-d/lookout","description":"Assisted code review, running custom code analyzers on pull requests","fork":false,"url":"https://api.github.com/repos/src-d/lookout","forks_url":"https://api.github.com/repos/src-d/lookout/forks","keys_url":"https://api.github.com/repos/src-d/lookout/keys{/key_id}","collaborators_url":"https://api.github.com/repos/src-d/lookout/collaborators{/collaborator}","teams_url":"https://api.github.com/repos/src-d/lookout/teams","hooks_url":"https://api.github.com/repos/src-d/lookout/hooks","issue_events_url":"https://api.github.com/repos/src-d/lookout/issues/events{/number}","events_url":"https://api.github.com/repos/src-d/lookout/events","assignees_url":"https://api.github.com/repos/src-d/lookout/assignees{/user}","branches_url":"https://api.github.com/repos/src-d/lookout/branches{/branch}","tags_url":"https://api.github.com/repos/src-d/lookout/tags","blobs_url":"https://api.github.com/repos/src-d/lookout/git/blobs{/sha}","git_tags_url":"https://api.github.com/repos/src-d/lookout/git/tags{/sha}","git_refs_url":"https://api.github.com/repos/src-d/lookout/git/refs{/sha}","trees_url":"https://api.github.com/repos/src-d/lookout/git/trees{/sha}","statuses_url":"https://api.github.com/repos/src-d/lookout/statuses/{sha}","languages_url":"https://api.github.com/repos/src-d/lookout/languages","stargazers_url":"https://api.github.com/repos/src-d/lookout/stargazers","contributors_url":"https://api.github.com/repos/src-d/lookout/contributors","subscribers_url":"https://api.github.com/repos/src-d/lookout/subscribers","subscription_url":"https://api.github.com/repos/src-d/lookout/subscription","commits_url":"https://api.github.com/repos/src-d/lookout/commits{/sha}","git_commits_url":"https://api.github.com/repos/src-d/lookout/git/commits{/sha}","comments_url":"https://api.github.com/repos/src-d/lookout/comments{/number}","issue_comment_url":"https://api.github.com/repos/src-d/lookout/issues/comments{/number}","contents_url":"https://api.github.com/repos/src-d/lookout/contents/{+path}","compare_url":"https://api.github.com/repos/src-d/lookout/compare/{base}...{head}","merges_url":"https://api.github.com/repos/src-d/lookout/merges","archive_url":"https://api.github.com/repos/src-d/lookout/{archive_format}{/ref}","downloads_url":"https://api.github.com/repos/src-d/lookout/downloads","issues_url":"https://api.github.com/repos/src-d/lookout/issues{/number}","pulls_url":"https://api.github.com/repos/src-d/lookout/pulls{/number}","milestones_url":"https://api.github.com/repos/src-d/lookout/milestones{/number}","notifications_url":"https://api.github.com/repos/src-d/lookout/notifications{?since,all,participating}","labels_url":"https://api.github.com/repos/src-d/lookout/labels{/name}","releases_url":"https://api.github.com/repos/src-d/lookout/releases{/id}","deployments_url":"https://api.github.com/repos/src-d/lookout/deployments","created_at":"2018-06-05T08:37:23Z","updated_at":"2025-10-05T17:39:33Z","pushed_at":"2021-08-03T19:18:36Z","git_url":"git://github.com/src-d/lookout.git","ssh_url":"git@github.com:src-d/lookout.git","clone_url":"https://github.com/src-d/lookout.git","svn_url":"https://github.com/src-d/lookout","homepage":"https://docs.sourced.tech/lookout","size":60130,"stargazers_count":152,"watchers_count":152,"language":"Go","has_issues":true,"has_projects":false,"has_downloads":true,"has_wiki":false,"has_pages":false,"has_discussions":false,"forks_count":33,"mirror_url":null,"archived":false,"disabled":false,"open_issues_count":84,"license":{"key":"agpl-3.0","name":"GNU Affero General Public License v3.0","spdx_id":"AGPL-3.0","url":"https://api.github.com/licenses/agpl-3.0","node_id":"MDc6TGljZW5zZTE="},"allow_forking":true,"is_template":false,"web_commit_signoff_required":false,"has_pull_requests":true,"pull_request_creation_policy":"all","topics":["code-review","github","lookout"],"visibility":"public","forks":33,"open_issues":84,"watchers":152,"default_branch":"master"}},"base":{"label":"src-d:master","ref":"master","sha":"d5cccd9aed531327965c374533f42e0469af4cda","user":{"login":"src-d","id":15128793,"node_id":"MDEyOk9yZ2FuaXphdGlvbjE1MTI4Nzkz","avatar_url":"https://avatars.githubusercontent.com/u/15128793?v=4","gravatar_id":"","url":"https://api.github.com/users/src-d","html_url":"https://github.com/src-d","followers_url":"https://api.github.com/users/src-d/followers","following_url":"https://api.github.com/users/src-d/following{/other_user}","gists_url":"https://api.github.com/users/src-d/gists{/gist_id}","starred_url":"https://api.github.com/users/src-d/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/src-d/subscriptions","organizations_url":"https://api.github.com/users/src-d/orgs","repos_url":"https://api.github.com/users/src-d/repos","events_url":"https://api.github.com/users/src-d/events{/privacy}","received_events_url":"https://api.github.com/users/src-d/received_events","type":"Organization","user_view_type":"public","site_admin":false},"repo":{"id":136146572,"node_id":"MDEwOlJlcG9zaXRvcnkxMzYxNDY1NzI=","name":"lookout","full_name":"src-d/lookout","private":false,"owner":{"login":"src-d","id":15128793,"node_id":"MDEyOk9yZ2FuaXphdGlvbjE1MTI4Nzkz","avatar_url":"https://avatars.githubusercontent.com/u/15128793?v=4","gravatar_id":"","url":"https://api.github.com/users/src-d","html_url":"https://github.com/src-d","followers_url":"https://api.github.com/users/src-d/followers","following_url":"https://api.github.com/users/src-d/following{/other_user}","gists_url":"https://api.github.com/users/src-d/gists{/gist_id}","starred_url":"https://api.github.com/users/src-d/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/src-d/subscriptions","organizations_url":"https://api.github.com/users/src-d/orgs","repos_url":"https://api.github.com/users/src-d/repos","events_url":"https://api.github.com/users/src-d/events{/privacy}","received_events_url":"https://api.github.com/users/src-d/received_events","type":"Organization","user_view_type":"public","site_admin":false},"html_url":"https://github.com/src-d/lookout","description":"Assisted code review, running custom code analyzers on pull requests","fork":false,"url":"https://api.github.com/repos/src-d/lookout","forks_url":"https://api.github.com/repos/src-d/lookout/forks","keys_url":"https://api.github.com/repos/src-d/lookout/keys{/key_id}","collaborators_url":"https://api.github.com/repos/src-d/lookout/collaborators{/collaborator}","teams_url":"https://api.github.com/repos/src-d/lookout/teams","hooks_url":"https://api.github.com/repos/src-d/lookout/hooks","issue_events_url":"https://api.github.com/repos/src-d/lookout/issues/events{/number}","events_url":"https://api.github.com/repos/src-d/lookout/events","assignees_url":"https://api.github.com/repos/src-d/lookout/assignees{/user}","branches_url":"https://api.github.com/repos/src-d/lookout/branches{/branch}","tags_url":"https://api.github.com/repos/src-d/lookout/tags","blobs_url":"https://api.github.com/repos/src-d/lookout/git/blobs{/sha}","git_tags_url":"https://api.github.com/repos/src-d/lookout/git/tags{/sha}","git_refs_url":"https://api.github.com/repos/src-d/lookout/git/refs{/sha}","trees_url":"https://api.github.com/repos/src-d/lookout/git/trees{/sha}","statuses_url":"https://api.github.com/repos/src-d/lookout/statuses/{sha}","languages_url":"https://api.github.com/repos/src-d/lookout/languages","stargazers_url":"https://api.github.com/repos/src-d/lookout/stargazers","contributors_url":"https://api.github.com/repos/src-d/lookout/contributors","subscribers_url":"https://api.github.com/repos/src-d/lookout/subscribers","subscription_url":"https://api.github.com/repos/src-d/lookout/subscription","commits_url":"https://api.github.com/repos/src-d/lookout/commits{/sha}","git_commits_url":"https://api.github.com/repos/src-d/lookout/git/commits{/sha}","comments_url":"https://api.github.com/repos/src-d/lookout/comments{/number}","issue_comment_url":"https://api.github.com/repos/src-d/lookout/issues/comments{/number}","contents_url":"https://api.github.com/repos/src-d/lookout/contents/{+path}","compare_url":"https://api.github.com/repos/src-d/lookout/compare/{base}...{head}","merges_url":"https://api.github.com/repos/src-d/lookout/merges","archive_url":"https://api.github.com/repos/src-d/lookout/{archive_format}{/ref}","downloads_url":"https://api.github.com/repos/src-d/lookout/downloads","issues_url":"https://api.github.com/repos/src-d/lookout/issues{/number}","pulls_url":"https://api.github.com/repos/src-d/lookout/pulls{/number}","milestones_url":"https://api.github.com/repos/src-d/lookout/milestones{/number}","notifications_url":"https://api.github.com/repos/src-d/lookout/notifications{?since,all,participating}","labels_url":"https://api.github.com/repos/src-d/lookout/labels{/name}","releases_url":"https://api.github.com/repos/src-d/lookout/releases{/id}","deployments_url":"https://api.github.com/repos/src-d/lookout/deployments","created_at":"2018-06-05T08:37:23Z","updated_at":"2025-10-05T17:39:33Z","pushed_at":"2021-08-03T19:18:36Z","git_url":"git://github.com/src-d/lookout.git","ssh_url":"git@github.com:src-d/lookout.git","clone_url":"https://github.com/src-d/lookout.git","svn_url":"https://github.com/src-d/lookout","homepage":"https://docs.sourced.tech/lookout","size":60130,"stargazers_count":152,"watchers_count":152,"language":"Go","has_issues":true,"has_projects":false,"has_downloads":true,"has_wiki":false,"has_pages":false,"has_discussions":false,"forks_count":33,"mirror_url":null,"archived":false,"disabled":false,"open_issues_count":84,"license":{"key":"agpl-3.0","name":"GNU Affero General Public License v3.0","spdx_id":"AGPL-3.0","url":"https://api.github.com/licenses/agpl-3.0","node_id":"MDc6TGljZW5zZTE="},"allow_forking":true,"is_template":false,"web_commit_signoff_required":false,"has_pull_requests":true,"pull_request_creation_policy":"all","topics":["code-review","github","lookout"],"visibility":"public","forks":33,"open_issues":84,"watchers":152,"default_branch":"master"}},"_links":{"self":{"href":"https://api.github.com/repos/src-d/lookout/pulls/794"},"html":{"href":"https://github.com/src-d/lookout/pull/794"},"issue":{"href":"https://api.github.com/repos/src-d/lookout/issues/794"},"comments":{"href":"https://api.github.com/repos/src-d/lookout/issues/794/comments"},"review_comments":{"href":"https://api.github.com/repos/src-d/lookout/pulls/794/comments"},"review_comment":{"href":"https://api.github.com/repos/src-d/lookout/pulls/comments{/number}"},"commits":{"href":"https://api.github.com/repos/src-d/lookout/pulls/794/commits"},"statuses":{"href":"https://api.github.com/repos/src-d/lookout/statuses/1638dd4b4e52ddf14888fdbeb7a1809d60cb10a9"}},"author_association":"NONE","auto_merge":null,"assignee":null,"active_lock_reason":null},{"url":"https://api.github.com/repos/src-d/lookout/pulls/791","id":529982011,"node_id":"MDExOlB1bGxSZXF1ZXN0NTI5OTgyMDEx","html_url":"https://github.com/src-d/lookout/pull/791","diff_url":"https://github.com/src-d/lookout/pull/791.diff","patch_url":"https://github.com/src-d/lookout/pull/791.patch","issue_url":"https://api.github.com/repos/src-d/lookout/issues/791","number":791,"state":"open","locked":false,"title":"Bump gopkg.in/yaml.v2 from 2.2.2 to 2.4.0","user":{"login":"dependabot-preview[bot]","id":27856297,"node_id":"MDM6Qm90Mjc4NTYyOTc=","avatar_url":"https://avatars.githubusercontent.com/in/2141?v=4","gravatar_id":"","url":"https://api.github.com/users/dependabot-preview%5Bbot%5D","html_url":"https://github.com/apps/dependabot-preview","followers_url":"https://api.github.com/users/dependabot-preview%5Bbot%5D/followers","following_url":"https://api.github.com/users/dependabot-preview%5Bbot%5D/following{/other_user}","gists_url":"https://api.github.com/users/dependabot-preview%5Bbot%5D/gists{/gist_id}","starred_url":"https://api.github.com/users/dependabot-preview%5Bbot%5D/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/dependabot-preview%5Bbot%5D/subscriptions","organizations_url":"https://api.github.com/users/dependabot-preview%5Bbot%5D/orgs","repos_url":"https://api.github.com/users/dependabot-preview%5Bbot%5D/repos","events_url":"https://api.github.com/users/dependabot-preview%5Bbot%5D/events{/privacy}","received_events_url":"https://api.github.com/users/dependabot-preview%5Bbot%5D/received_events","type":"Bot","user_view_type":"public","site_admin":false},"body":"Bumps [gopkg.in/yaml.v2](https://github.com/go-yaml/yaml) from 2.2.2 to 2.4.0.\n<details>\n<summary>Commits</summary>\n<ul>\n<li><a href=\"https://github.com/go-yaml/yaml/commit/7649d4548cb53a614db133b2a8ac1f31859dda8c\"><code>7649d45</code></a> Revert v2 line length change as discussed in <a href=\"https://github-redirect.dependabot.com/go-yaml/yaml/issues/670\">#670</a></li>\n<li><a href=\"https://github.com/go-yaml/yaml/commit/b893565b90ca5ebaabd27e535c0e56f97856e5ff\"><code>b893565</code></a> Add go1.14 into travis config (<a href=\"https://github-redirect.dependabot.com/go-yaml/yaml/issues/585\">#585</a>)</li>\n<li><a href=\"https://github.com/go-yaml/yaml/commit/bf81f7e13f04d859302d6b0d5488eb242ab1161c\"><code>bf81f7e</code></a> Fix Marshal documentation on omitempty and IsZero (<a href=\"https://github-redirect.dependabot.com/go-yaml/yaml/issues/608\">#608</a>)</li>\n<li><a href=\"https://github.com/go-yaml/yaml/commit/0b1645d91e851e735d3e23330303ce81f70adbe3\"><code>0b1645d</code></a> Set the default line length to infinity (-1) (<a href=\"https://github-redirect.dependabot.com/go-yaml/yaml/issues/571\">#571</a>)</li>\n<li><a href=\"https://github.com/go-yaml/yaml/commit/53403b58ad1b561927d19068c655246f2db79d48\"><code>53403b5</code></a> Optimize cases with long potential simple_keys (<a href=\"https://github-redirect.dependabot.com/go-yaml/yaml/issues/555\">#555</a>)</li>\n<li><a href=\"https://github.com/go-yaml/yaml/commit/1f64d6156d11335c3f22d9330b0ad14fc1e789ce\"><code>1f64d61</code></a> Fix issue in simple_keys improvements (<a href=\"https://github-redirect.dependabot.com/go-yaml/yaml/issues/548\">#548</a>)</li>\n<li><a href=\"https://github.com/go-yaml/yaml/commit/a95acef3719e5e9f7614cc90a119dee4699291eb\"><code>a95acef</code></a> Update travis config to use latest go versions (<a href=\"https://github-redirect.dependabot.com/go-yaml/yaml/issues/540\">#540</a>)</li>\n<li><a href=\"https://github.com/go-yaml/yaml/commit/36babc3691687601732d9e2571b698be4116469a\"><code>36babc3</code></a> Port stale simple_keys fix to v2 (<a href=\"https://github-redirect.dependabot.com/go-yaml/yaml/issues/543\">#543</a>)</li>\n<li><a href=\"https://github.com/go-yaml/yaml/commit/770b8dae4cf00919e5eafffbd8d58186294b61b5\"><code>770b8da</code></a> Fix Decorder doc typo (<a href=\"https://github-redirect.dependabot.com/go-yaml/yaml/issues/494\">#494</a>)</li>\n<li><a href=\"https://github.com/go-yaml/yaml/commit/1ed59511881fdb008c1e618e9f219ce0704e658e\"><code>1ed5951</code></a> Add Go 1.10-13 to travis setup.</li>\n<li>Additional commits viewable in <a href=\"https://github.com/go-yaml/yaml/compare/v2.2.2...v2.4.0\">compare view</a></li>\n</ul>\n</details>\n<br />\n\n\n[![Dependabot compatibility score](https://api.dependabot.com/badges/compatibility_score?dependency-name=gopkg.in/yaml.v2&package-manager=dep&previous-version=2.2.2&new-version=2.4.0)](https://dependabot.com/compatibility-score/?dependency-name=gopkg.in/yaml.v2&package-manager=dep&previous-version=2.2.2&new-version=2.4.0)\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n<details>\n<summary>Dependabot commands and options</summary>\n<br />\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot merge` will merge this PR after your CI passes on it\n- `@dependabot squash and merge` will squash and merge this PR after your CI passes on it\n- `@dependabot cancel merge` will cancel a previously requested merge and block automerging\n- `@dependabot reopen` will reopen this PR if it is closed\n- `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually\n- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot use these labels` will set the current labels as the default for future PRs for this repo and language\n- `@dependabot use these reviewers` will set the current reviewers as the default for future PRs for this repo and language\n- `@dependabot use these assignees` will set the current assignees as the default for future PRs for this repo and language\n- `@dependabot use this milestone` will set the current milestone as the default for future PRs for this repo and language\n- `@dependabot badge me` will comment on this PR with code to add a \"Dependabot enabled\" badge to your readme\n\nAdditionally, you can set the following in your Dependabot [dashboard](https://app.dependabot.com):\n- Update frequency (including time of day and day of week)\n- Pull request limits (per update run and/or open at any time)\n- Automerge options (never/patch/minor, and dev/runtime dependencies)\n- Out-of-range updates (receive only lockfile updates, if desired)\n- Security updates (receive only security updates, if desired)\n\n\n\n</details>","created_at":"2020-12-01T05:10:34Z","updated_at":"2020-12-01T05:10:36Z","closed_at":null,"merged_at":null,"merge_commit_sha":"c4ee9f20626d992929b4f77181b67622e0c63960","assignees":[],"requested_reviewers":[],"requested_teams":[],"labels":[{"id":1224325914,"node_id":"MDU6TGFiZWwxMjI0MzI1OTE0","url":"https://api.github.com/repos/src-d/lookout/labels/dependencies","name":"dependencies","color":"0025ff","default":false,"description":"Pull requests that update a dependency file"},{"id":1225436017,"node_id":"MDU6TGFiZWwxMjI1NDM2MDE3","url":"https://api.github.com/repos/src-d/lookout/labels/go","name":"go","color":"16e2e2","default":false,"description":"Pull requests that update Go code"}],"milestone":null,"draft":false,"commits_url":"https://api.github.com/repos/src-d/lookout/pulls/791/commits","review_comments_url":"https://api.github.com/repos/src-d/lookout/pulls/791/comments","review_comment_url":"https://api.github.com/repos/src-d/lookout/pulls/comments{/number}","comments_url":"https://api.github.com/repos/src-d/lookout/issues/791/comments","statuses_url":"https://api.github.com/repos/src-d/lookout/statuses/4e1a244af1b23f09c293ace71b512def4b53512d","head":{"label":"src-d:dependabot/dep/gopkg.in/yaml.v2-2.4.0","ref":"dependabot/dep/gopkg.in/yaml.v2-2.4.0","sha":"4e1a244af1b23f09c293ace71b512def4b53512d","user":{"login":"src-d","id":15128793,"node_id":"MDEyOk9yZ2FuaXphdGlvbjE1MTI4Nzkz","avatar_url":"https://avatars.githubusercontent.com/u/15128793?v=4","gravatar_id":"","url":"https://api.github.com/users/src-d","html_url":"https://github.com/src-d","followers_url":"https://api.github.com/users/src-d/followers","following_url":"https://api.github.com/users/src-d/following{/other_user}","gists_url":"https://api.github.com/users/src-d/gists{/gist_id}","starred_url":"https://api.github.com/users/src-d/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/src-d/subscriptions","organizations_url":"https://api.github.com/users/src-d/orgs","repos_url":"https://api.github.com/users/src-d/repos","events_url":"https://api.github.com/users/src-d/events{/privacy}","received_events_url":"https://api.github.com/users/src-d/received_events","type":"Organization","user_view_type":"public","site_admin":false},"repo":{"id":136146572,"node_id":"MDEwOlJlcG9zaXRvcnkxMzYxNDY1NzI=","name":"lookout","full_name":"src-d/lookout","private":false,"owner":{"login":"src-d","id":15128793,"node_id":"MDEyOk9yZ2FuaXphdGlvbjE1MTI4Nzkz","avatar_url":"https://avatars.githubusercontent.com/u/15128793?v=4","gravatar_id":"","url":"https://api.github.com/users/src-d","html_url":"https://github.com/src-d","followers_url":"https://api.github.com/users/src-d/followers","following_url":"https://api.github.com/users/src-d/following{/other_user}","gists_url":"https://api.github.com/users/src-d/gists{/gist_id}","starred_url":"https://api.github.com/users/src-d/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/src-d/subscriptions","organizations_url":"https://api.github.com/users/src-d/orgs","repos_url":"https://api.github.com/users/src-d/repos","events_url":"https://api.github.com/users/src-d/events{/privacy}","received_events_url":"https://api.github.com/users/src-d/received_events","type":"Organization","user_view_type":"public","site_admin":false},"html_url":"https://github.com/src-d/lookout","description":"Assisted code review, running custom code analyzers on pull requests","fork":false,"url":"https://api.github.com/repos/src-d/lookout","forks_url":"https://api.github.com/repos/src-d/lookout/forks","keys_url":"https://api.github.com/repos/src-d/lookout/keys{/key_id}","collaborators_url":"https://api.github.com/repos/src-d/lookout/collaborators{/collaborator}","teams_url":"https://api.github.com/repos/src-d/lookout/teams","hooks_url":"https://api.github.com/repos/src-d/lookout/hooks","issue_events_url":"https://api.github.com/repos/src-d/lookout/issues/events{/number}","events_url":"https://api.github.com/repos/src-d/lookout/events","assignees_url":"https://api.github.com/repos/src-d/lookout/assignees{/user}","branches_url":"https://api.github.com/repos/src-d/lookout/branches{/branch}","tags_url":"https://api.github.com/repos/src-d/lookout/tags","blobs_url":"https://api.github.com/repos/src-d/lookout/git/blobs{/sha}","git_tags_url":"https://api.github.com/repos/src-d/lookout/git/tags{/sha}","git_refs_url":"https://api.github.com/repos/src-d/lookout/git/refs{/sha}","trees_url":"https://api.github.com/repos/src-d/lookout/git/trees{/sha}","statuses_url":"https://api.github.com/repos/src-d/lookout/statuses/{sha}","languages_url":"https://api.github.com/repos/src-d/lookout/languages","stargazers_url":"https://api.github.com/repos/src-d/lookout/stargazers","contributors_url":"https://api.github.com/repos/src-d/lookout/contributors","subscribers_url":"https://api.github.com/repos/src-d/lookout/subscribers","subscription_url":"https://api.github.com/repos/src-d/lookout/subscription","commits_url":"https://api.github.com/repos/src-d/lookout/commits{/sha}","git_commits_url":"https://api.github.com/repos/src-d/lookout/git/commits{/sha}","comments_url":"https://api.github.com/repos/src-d/lookout/comments{/number}","issue_comment_url":"https://api.github.com/repos/src-d/lookout/issues/comments{/number}","contents_url":"https://api.github.com/repos/src-d/lookout/contents/{+path}","compare_url":"https://api.github.com/repos/src-d/lookout/compare/{base}...{head}","merges_url":"https://api.github.com/repos/src-d/lookout/merges","archive_url":"https://api.github.com/repos/src-d/lookout/{archive_format}{/ref}","downloads_url":"https://api.github.com/repos/src-d/lookout/downloads","issues_url":"https://api.github.com/repos/src-d/lookout/issues{/number}","pulls_url":"https://api.github.com/repos/src-d/lookout/pulls{/number}","milestones_url":"https://api.github.com/repos/src-d/lookout/milestones{/number}","notifications_url":"https://api.github.com/repos/src-d/lookout/notifications{?since,all,participating}","labels_url":"https://api.github.com/repos/src-d/lookout/labels{/name}","releases_url":"https://api.github.com/repos/src-d/lookout/releases{/id}","deployments_url":"https://api.github.com/repos/src-d/lookout/deployments","created_at":"2018-06-05T08:37:23Z","updated_at":"2025-10-05T17:39:33Z","pushed_at":"2021-08-03T19:18:36Z","git_url":"git://github.com/src-d/lookout.git","ssh_url":"git@github.com:src-d/lookout.git","clone_url":"https://github.com/src-d/lookout.git","svn_url":"https://github.com/src-d/lookout","homepage":"https://docs.sourced.tech/lookout","size":60130,"stargazers_count":152,"watchers_count":152,"language":"Go","has_issues":true,"has_projects":false,"has_downloads":true,"has_wiki":false,"has_pages":false,"has_discussions":false,"forks_count":33,"mirror_url":null,"archived":false,"disabled":false,"open_issues_count":84,"license":{"key":"agpl-3.0","name":"GNU Affero General Public License v3.0","spdx_id":"AGPL-3.0","url":"https://api.github.com/licenses/agpl-3.0","node_id":"MDc6TGljZW5zZTE="},"allow_forking":true,"is_template":false,"web_commit_signoff_required":false,"has_pull_requests":true,"pull_request_creation_policy":"all","topics":["code-review","github","lookout"],"visibility":"public","forks":33,"open_issues":84,"watchers":152,"default_branch":"master"}},"base":{"label":"src-d:master","ref":"master","sha":"d5cccd9aed531327965c374533f42e0469af4cda","user":{"login":"src-d","id":15128793,"node_id":"MDEyOk9yZ2FuaXphdGlvbjE1MTI4Nzkz","avatar_url":"https://avatars.githubusercontent.com/u/15128793?v=4","gravatar_id":"","url":"https://api.github.com/users/src-d","html_url":"https://github.com/src-d","followers_url":"https://api.github.com/users/src-d/followers","following_url":"https://api.github.com/users/src-d/following{/other_user}","gists_url":"https://api.github.com/users/src-d/gists{/gist_id}","starred_url":"https://api.github.com/users/src-d/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/src-d/subscriptions","organizations_url":"https://api.github.com/users/src-d/orgs","repos_url":"https://api.github.com/users/src-d/repos","events_url":"https://api.github.com/users/src-d/events{/privacy}","received_events_url":"https://api.github.com/users/src-d/received_events","type":"Organization","user_view_type":"public","site_admin":false},"repo":{"id":136146572,"node_id":"MDEwOlJlcG9zaXRvcnkxMzYxNDY1NzI=","name":"lookout","full_name":"src-d/lookout","private":false,"owner":{"login":"src-d","id":15128793,"node_id":"MDEyOk9yZ2FuaXphdGlvbjE1MTI4Nzkz","avatar_url":"https://avatars.githubusercontent.com/u/15128793?v=4","gravatar_id":"","url":"https://api.github.com/users/src-d","html_url":"https://github.com/src-d","followers_url":"https://api.github.com/users/src-d/followers","following_url":"https://api.github.com/users/src-d/following{/other_user}","gists_url":"https://api.github.com/users/src-d/gists{/gist_id}","starred_url":"https://api.github.com/users/src-d/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/src-d/subscriptions","organizations_url":"https://api.github.com/users/src-d/orgs","repos_url":"https://api.github.com/users/src-d/repos","events_url":"https://api.github.com/users/src-d/events{/privacy}","received_events_url":"https://api.github.com/users/src-d/received_events","type":"Organization","user_view_type":"public","site_admin":false},"html_url":"https://github.com/src-d/lookout","description":"Assisted code review, running custom code analyzers on pull requests","fork":false,"url":"https://api.github.com/repos/src-d/lookout","forks_url":"https://api.github.com/repos/src-d/lookout/forks","keys_url":"https://api.github.com/repos/src-d/lookout/keys{/key_id}","collaborators_url":"https://api.github.com/repos/src-d/lookout/collaborators{/collaborator}","teams_url":"https://api.github.com/repos/src-d/lookout/teams","hooks_url":"https://api.github.com/repos/src-d/lookout/hooks","issue_events_url":"https://api.github.com/repos/src-d/lookout/issues/events{/number}","events_url":"https://api.github.com/repos/src-d/lookout/events","assignees_url":"https://api.github.com/repos/src-d/lookout/assignees{/user}","branches_url":"https://api.github.com/repos/src-d/lookout/branches{/branch}","tags_url":"https://api.github.com/repos/src-d/lookout/tags","blobs_url":"https://api.github.com/repos/src-d/lookout/git/blobs{/sha}","git_tags_url":"https://api.github.com/repos/src-d/lookout/git/tags{/sha}","git_refs_url":"https://api.github.com/repos/src-d/lookout/git/refs{/sha}","trees_url":"https://api.github.com/repos/src-d/lookout/git/trees{/sha}","statuses_url":"https://api.github.com/repos/src-d/lookout/statuses/{sha}","languages_url":"https://api.github.com/repos/src-d/lookout/languages","stargazers_url":"https://api.github.com/repos/src-d/lookout/stargazers","contributors_url":"https://api.github.com/repos/src-d/lookout/contributors","subscribers_url":"https://api.github.com/repos/src-d/lookout/subscribers","subscription_url":"https://api.github.com/repos/src-d/lookout/subscription","commits_url":"https://api.github.com/repos/src-d/lookout/commits{/sha}","git_commits_url":"https://api.github.com/repos/src-d/lookout/git/commits{/sha}","comments_url":"https://api.github.com/repos/src-d/lookout/comments{/number}","issue_comment_url":"https://api.github.com/repos/src-d/lookout/issues/comments{/number}","contents_url":"https://api.github.com/repos/src-d/lookout/contents/{+path}","compare_url":"https://api.github.com/repos/src-d/lookout/compare/{base}...{head}","merges_url":"https://api.github.com/repos/src-d/lookout/merges","archive_url":"https://api.github.com/repos/src-d/lookout/{archive_format}{/ref}","downloads_url":"https://api.github.com/repos/src-d/lookout/downloads","issues_url":"https://api.github.com/repos/src-d/lookout/issues{/number}","pulls_url":"https://api.github.com/repos/src-d/lookout/pulls{/number}","milestones_url":"https://api.github.com/repos/src-d/lookout/milestones{/number}","notifications_url":"https://api.github.com/repos/src-d/lookout/notifications{?since,all,participating}","labels_url":"https://api.github.com/repos/src-d/lookout/labels{/name}","releases_url":"https://api.github.com/repos/src-d/lookout/releases{/id}","deployments_url":"https://api.github.com/repos/src-d/lookout/deployments","created_at":"2018-06-05T08:37:23Z","updated_at":"2025-10-05T17:39:33Z","pushed_at":"2021-08-03T19:18:36Z","git_url":"git://github.com/src-d/lookout.git","ssh_url":"git@github.com:src-d/lookout.git","clone_url":"https://github.com/src-d/lookout.git","svn_url":"https://github.com/src-d/lookout","homepage":"https://docs.sourced.tech/lookout","size":60130,"stargazers_count":152,"watchers_count":152,"language":"Go","has_issues":true,"has_projects":false,"has_downloads":true,"has_wiki":false,"has_pages":false,"has_discussions":false,"forks_count":33,"mirror_url":null,"archived":false,"disabled":false,"open_issues_count":84,"license":{"key":"agpl-3.0","name":"GNU Affero General Public License v3.0","spdx_id":"AGPL-3.0","url":"https://api.github.com/licenses/agpl-3.0","node_id":"MDc6TGljZW5zZTE="},"allow_forking":true,"is_template":false,"web_commit_signoff_required":false,"has_pull_requests":true,"pull_request_creation_policy":"all","topics":["code-review","github","lookout"],"visibility":"public","forks":33,"open_issues":84,"watchers":152,"default_branch":"master"}},"_links":{"self":{"href":"https://api.github.com/repos/src-d/lookout/pulls/791"},"html":{"href":"https://github.com/src-d/lookout/pull/791"},"issue":{"href":"https://api.github.com/repos/src-d/lookout/issues/791"},"comments":{"href":"https://api.github.com/repos/src-d/lookout/issues/791/comments"},"review_comments":{"href":"https://api.github.com/repos/src-d/lookout/pulls/791/comments"},"review_comment":{"href":"https://api.github.com/repos/src-d/lookout/pulls/comments{/number}"},"commits":{"href":"https://api.github.com/repos/src-d/lookout/pulls/791/commits"},"statuses":{"href":"https://api.github.com/repos/src-d/lookout/statuses/4e1a244af1b23f09c293ace71b512def4b53512d"}},"author_association":"NONE","auto_merge":null,"assignee":null,"active_lock_reason":null},{"url":"https://api.github.com/repos/src-d/lookout/pulls/783","id":513540429,"node_id":"MDExOlB1bGxSZXF1ZXN0NTEzNTQwNDI5","html_url":"https://github.com/src-d/lookout/pull/783","diff_url":"https://github.com/src-d/lookout/pull/783.diff","patch_url":"https://github.com/src-d/lookout/pull/783.patch","issue_url":"https://api.github.com/repos/src-d/lookout/issues/783","number":783,"state":"open","locked":false,"title":"Bump react from 16.8.4 to 16.14.0 in /frontend","user":{"login":"dependabot-preview[bot]","id":27856297,"node_id":"MDM6Qm90Mjc4NTYyOTc=","avatar_url":"https://avatars.githubusercontent.com/in/2141?v=4","gravatar_id":"","url":"https://api.github.com/users/dependabot-preview%5Bbot%5D","html_url":"https://github.com/apps/dependabot-preview","followers_url":"https://api.github.com/users/dependabot-preview%5Bbot%5D/followers","following_url":"https://api.github.com/users/dependabot-preview%5Bbot%5D/following{/other_user}","gists_url":"https://api.github.com/users/dependabot-preview%5Bbot%5D/gists{/gist_id}","starred_url":"https://api.github.com/users/dependabot-preview%5Bbot%5D/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/dependabot-preview%5Bbot%5D/subscriptions","organizations_url":"https://api.github.com/users/dependabot-preview%5Bbot%5D/orgs","repos_url":"https://api.github.com/users/dependabot-preview%5Bbot%5D/repos","events_url":"https://api.github.com/users/dependabot-preview%5Bbot%5D/events{/privacy}","received_events_url":"https://api.github.com/users/dependabot-preview%5Bbot%5D/received_events","type":"Bot","user_view_type":"public","site_admin":false},"body":"Bumps [react](https://github.com/facebook/react/tree/HEAD/packages/react) from 16.8.4 to 16.14.0.\n<details>\n<summary>Release notes</summary>\n<p><em>Sourced from <a href=\"https://github.com/facebook/react/releases\">react's releases</a>.</em></p>\n<blockquote>\n<h2>16.14.0 (October 14, 2020)</h2>\n<h3>React</h3>\n<ul>\n<li>Add support for the <a href=\"https://reactjs.org/blog/2020/09/22/introducing-the-new-jsx-transform.html\">new JSX transform</a>. (<a href=\"https://github.com/lunaruan\">@lunaruan</a> in <a href=\"https://github-redirect.dependabot.com/facebook/react/pull/18299\">#18299</a>)</li>\n</ul>\n<h2>16.13.1 (March 19, 2020)</h2>\n<h3>React DOM</h3>\n<ul>\n<li>Fix bug in legacy mode Suspense where effect clean-up functions are not fired. This only affects users who use Suspense for data fetching in legacy mode, which is not technically supported. (<a href=\"https://github.com/acdlite\">@acdlite</a> in <a href=\"https://github-redirect.dependabot.com/facebook/react/pull/18238\">#18238</a>)</li>\n<li>Revert warning for cross-component updates that happen inside class render lifecycles (<code>componentWillReceiveProps</code>, <code>shouldComponentUpdate</code>, and so on). (<a href=\"https://github.com/gaearon\">@gaearon</a> in <a href=\"https://github-redirect.dependabot.com/facebook/react/pull/18330\">#18330</a>)</li>\n</ul>\n<h2>Artifacts</h2>\n<ul>\n<li>react: <a href=\"https://unpkg.com/react@16.13.1/umd/\">https://unpkg.com/react@16.13.1/umd/</a></li>\n<li>react-art: <a href=\"https://unpkg.com/react-art@16.13.1/umd/\">https://unpkg.com/react-art@16.13.1/umd/</a></li>\n<li>react-dom: <a href=\"https://unpkg.com/react-dom@16.13.1/umd/\">https://unpkg.com/react-dom@16.13.1/umd/</a></li>\n<li>react-is: <a href=\"https://unpkg.com/react-is@16.13.1/umd/\">https://unpkg.com/react-is@16.13.1/umd/</a></li>\n<li>react-test-renderer: <a href=\"https://unpkg.com/react-test-renderer@16.13.1/umd/\">https://unpkg.com/react-test-renderer@16.13.1/umd/</a></li>\n<li>scheduler: <a href=\"https://unpkg.com/scheduler@0.19.1/umd/\">https://unpkg.com/scheduler@0.19.1/umd/</a></li>\n</ul>\n<h2>16.13.0 (February 26, 2020)</h2>\n<h3>React</h3>\n<ul>\n<li>Warn when a string ref is used in a manner that's not amenable to a future codemod (<a href=\"https://github.com/lunaruan\">@lunaruan</a> in <a href=\"https://github-redirect.dependabot.com/facebook/react/pull/17864\">#17864</a>)</li>\n<li>Deprecate <code>React.createFactory()</code> (<a href=\"https://github.com/trueadm\">@trueadm</a> in <a href=\"https://github-redirect.dependabot.com/facebook/react/pull/17878\">#17878</a>)</li>\n</ul>\n<h3>React DOM</h3>\n<ul>\n<li>Warn when changes in <code>style</code> may cause an unexpected collision (<a href=\"https://github.com/sophiebits\">@sophiebits</a> in <a href=\"https://github-redirect.dependabot.com/facebook/react/pull/14181\">#14181</a>, <a href=\"https://github-redirect.dependabot.com/facebook/react/pull/18002\">#18002</a>)</li>\n<li>Warn when a function component is updated during another component's render phase (<a href=\"(https://github.com/acdlite)\">@acdlite</a> in <a href=\"https://github-redirect.dependabot.com/facebook/react/pull/17099\">#17099</a>)</li>\n<li>Deprecate <code>unstable_createPortal</code> (<a href=\"https://github.com/trueadm\">@trueadm</a> in <a href=\"https://github-redirect.dependabot.com/facebook/react/pull/17880\">#17880</a>)</li>\n<li>Fix <code>onMouseEnter</code> being fired on disabled buttons (<a href=\"https://github.com/AlfredoGJ\">@AlfredoGJ</a> in <a href=\"https://github-redirect.dependabot.com/facebook/react/pull/17675\">#17675</a>)</li>\n<li>Call <code>shouldComponentUpdate</code> twice when developing in <code>StrictMode</code> (<a href=\"https://github.com/bvaughn\">@bvaughn</a> in <a href=\"https://github-redirect.dependabot.com/facebook/react/pull/17942\">#17942</a>)</li>\n<li>Add <code>version</code> property to ReactDOM (<a href=\"https://github.com/ealush\">@ealush</a> in <a href=\"https://github-redirect.dependabot.com/facebook/react/pull/15780\">#15780</a>)</li>\n<li>Don't call <code>toString()</code> of <code>dangerouslySetInnerHTML</code> (<a href=\"https://github.com/sebmarkbage\">@sebmarkbage</a> in <a href=\"https://github-redirect.dependabot.com/facebook/react/pull/17773\">#17773</a>)</li>\n<li>Show component stacks in more warnings (<a href=\"https://github.com/gaearon\">@gaearon</a> in <a href=\"https://github-redirect.dependabot.com/facebook/react/pull/17922\">#17922</a>, <a href=\"https://github-redirect.dependabot.com/facebook/react/pull/17586\">#17586</a>)</li>\n</ul>\n<h3>Concurrent Mode (Experimental)</h3>\n<ul>\n<li>Warn for problematic usages of <code>ReactDOM.createRoot()</code> (<a href=\"https://github.com/trueadm\">@trueadm</a> in <a href=\"https://github-redirect.dependabot.com/facebook/react/pull/17937\">#17937</a>)</li>\n<li>Remove <code>ReactDOM.createRoot()</code> callback params and added warnings on usage (<a href=\"https://github.com/bvaughn\">@bvaughn</a> in <a href=\"https://github-redirect.dependabot.com/facebook/react/pull/17916\">#17916</a>)</li>\n<li>Don't group Idle/Offscreen work with other work (<a href=\"https://github.com/sebmarkbage\">@sebmarkbage</a> in <a href=\"https://github-redirect.dependabot.com/facebook/react/pull/17456\">#17456</a>)</li>\n<li>Adjust <code>SuspenseList</code> CPU bound heuristic (<a href=\"https://github.com/sebmarkbage\">@sebmarkbage</a> in <a href=\"https://github-redirect.dependabot.com/facebook/react/pull/17455\">#17455</a>)</li>\n<li>Add missing event plugin priorities (<a href=\"https://github.com/trueadm\">@trueadm</a> in <a href=\"https://github-redirect.dependabot.com/facebook/react/pull/17914\">#17914</a>)</li>\n<li>Fix <code>isPending</code> only being true when transitioning from inside an input event (<a href=\"https://github.com/acdlite\">@acdlite</a> in <a href=\"https://github-redirect.dependabot.com/facebook/react/pull/17382\">#17382</a>)</li>\n<li>Fix <code>React.memo</code> components dropping updates when interrupted by a higher priority update (<a href=\"(https://github.com/acdlite)\">@acdlite</a> in <a href=\"https://github-redirect.dependabot.com/facebook/react/pull/18091\">#18091</a>)</li>\n<li>Don't warn when suspending at the wrong priority (<a href=\"https://github.com/gaearon\">@gaearon</a> in <a href=\"https://github-redirect.dependabot.com/facebook/react/pull/17971\">#17971</a>)</li>\n<li>Fix a bug with rebasing updates (<a href=\"https://github.com/acdlite\">@acdlite</a> and <a href=\"https://github.com/sebmarkbage\">@sebmarkbage</a> in <a href=\"https://github-redirect.dependabot.com/facebook/react/pull/17560\">#17560</a>, <a href=\"https://github-redirect.dependabot.com/facebook/react/pull/17510\">#17510</a>, <a href=\"https://github-redirect.dependabot.com/facebook/react/pull/17483\">#17483</a>, <a href=\"https://github-redirect.dependabot.com/facebook/react/pull/17480\">#17480</a>)</li>\n</ul>\n<h2>Artifacts</h2>\n<!-- raw HTML omitted -->\n</blockquote>\n</details>\n<details>\n<summary>Changelog</summary>\n<p><em>Sourced from <a href=\"https://github.com/facebook/react/blob/master/CHANGELOG.md\">react's changelog</a>.</em></p>\n<blockquote>\n<h2>16.14.0 (October 14, 2020)</h2>\n<h3>React</h3>\n<ul>\n<li>Add support for the <a href=\"https://reactjs.org/blog/2020/09/22/introducing-the-new-jsx-transform.html\">new JSX transform</a>. (<a href=\"https://github.com/lunaruan\">@lunaruan</a> in <a href=\"https://github-redirect.dependabot.com/facebook/react/pull/18299\">#18299</a>)</li>\n</ul>\n<h2>16.13.1 (March 19, 2020)</h2>\n<h3>React DOM</h3>\n<ul>\n<li>Fix bug in legacy mode Suspense where effect clean-up functions are not fired. This only affects users who use Suspense for data fetching in legacy mode, which is not technically supported. (<a href=\"https://github.com/acdlite\">@acdlite</a> in <a href=\"https://github-redirect.dependabot.com/facebook/react/pull/18238\">#18238</a>)</li>\n<li>Revert warning for cross-component updates that happen inside class render lifecycles (<code>componentWillReceiveProps</code>, <code>shouldComponentUpdate</code>, and so on). (<a href=\"https://github.com/gaearon\">@gaearon</a> in <a href=\"https://github-redirect.dependabot.com/facebook/react/pull/18330\">#18330</a>)</li>\n</ul>\n<h2>16.13.0 (February 26, 2020)</h2>\n<h3>React</h3>\n<ul>\n<li>Warn when a string ref is used in a manner that's not amenable to a future codemod (<a href=\"https://github.com/lunaruan\">@lunaruan</a> in <a href=\"https://github-redirect.dependabot.com/facebook/react/pull/17864\">#17864</a>)</li>\n<li>Deprecate <code>React.createFactory()</code> (<a href=\"https://github.com/trueadm\">@trueadm</a> in <a href=\"https://github-redirect.dependabot.com/facebook/react/pull/17878\">#17878</a>)</li>\n</ul>\n<h3>React DOM</h3>\n<ul>\n<li>Warn when changes in <code>style</code> may cause an unexpected collision (<a href=\"https://github.com/sophiebits\">@sophiebits</a> in <a href=\"https://github-redirect.dependabot.com/facebook/react/pull/14181\">#14181</a>, <a href=\"https://github-redirect.dependabot.com/facebook/react/pull/18002\">#18002</a>)</li>\n<li>Warn when a function component is updated during another component's render phase (<a href=\"https://github.com/acdlite\">@acdlite</a> in <a href=\"https://github-redirect.dependabot.com/facebook/react/pull/17099\">#17099</a>)</li>\n<li>Deprecate <code>unstable_createPortal</code> (<a href=\"https://github.com/trueadm\">@trueadm</a> in <a href=\"https://github-redirect.dependabot.com/facebook/react/pull/17880\">#17880</a>)</li>\n<li>Fix <code>onMouseEnter</code> being fired on disabled buttons (<a href=\"https://github.com/AlfredoGJ\">@AlfredoGJ</a> in <a href=\"https://github-redirect.dependabot.com/facebook/react/pull/17675\">#17675</a>)</li>\n<li>Call <code>shouldComponentUpdate</code> twice when developing in <code>StrictMode</code> (<a href=\"https://github.com/bvaughn\">@bvaughn</a> in <a href=\"https://github-redirect.dependabot.com/facebook/react/pull/17942\">#17942</a>)</li>\n<li>Add <code>version</code> property to ReactDOM (<a href=\"https://github.com/ealush\">@ealush</a> in <a href=\"https://github-redirect.dependabot.com/facebook/react/pull/15780\">#15780</a>)</li>\n<li>Don't call <code>toString()</code> of <code>dangerouslySetInnerHTML</code> (<a href=\"https://github.com/sebmarkbage\">@sebmarkbage</a> in <a href=\"https://github-redirect.dependabot.com/facebook/react/pull/17773\">#17773</a>)</li>\n<li>Show component stacks in more warnings (<a href=\"https://github.com/gaearon\">@gaearon</a> in <a href=\"https://github-redirect.dependabot.com/facebook/react/pull/17922\">#17922</a>, <a href=\"https://github-redirect.dependabot.com/facebook/react/pull/17586\">#17586</a>)</li>\n</ul>\n<h3>Concurrent Mode (Experimental)</h3>\n<ul>\n<li>Warn for problematic usages of <code>ReactDOM.createRoot()</code> (<a href=\"https://github.com/trueadm\">@trueadm</a> in <a href=\"https://github-redirect.dependabot.com/facebook/react/pull/17937\">#17937</a>)</li>\n<li>Remove <code>ReactDOM.createRoot()</code> callback params and added warnings on usage (<a href=\"https://github.com/bvaughn\">@bvaughn</a> in <a href=\"https://github-redirect.dependabot.com/facebook/react/pull/17916\">#17916</a>)</li>\n<li>Don't group Idle/Offscreen work with other work (<a href=\"https://github.com/sebmarkbage\">@sebmarkbage</a> in <a href=\"https://github-redirect.dependabot.com/facebook/react/pull/17456\">#17456</a>)</li>\n<li>Adjust <code>SuspenseList</code> CPU bound heuristic (<a href=\"https://github.com/sebmarkbage\">@sebmarkbage</a> in <a href=\"https://github-redirect.dependabot.com/facebook/react/pull/17455\">#17455</a>)</li>\n<li>Add missing event plugin priorities (<a href=\"https://github.com/trueadm\">@trueadm</a> in <a href=\"https://github-redirect.dependabot.com/facebook/react/pull/17914\">#17914</a>)</li>\n<li>Fix <code>isPending</code> only being true when transitioning from inside an input event (<a href=\"https://github.com/acdlite\">@acdlite</a> in <a href=\"https://github-redirect.dependabot.com/facebook/react/pull/17382\">#17382</a>)</li>\n<li>Fix <code>React.memo</code> components dropping updates when interrupted by a higher priority update (<a href=\"(https://github.com/acdlite)\">@acdlite</a> in <a href=\"https://github-redirect.dependabot.com/facebook/react/pull/18091\">#18091</a>)</li>\n<li>Don't warn when suspending at the wrong priority (<a href=\"https://github.com/gaearon\">@gaearon</a> in <a href=\"https://github-redirect.dependabot.com/facebook/react/pull/17971\">#17971</a>)</li>\n<li>Fix a bug with rebasing updates (<a href=\"https://github.com/acdlite\">@acdlite</a> and <a href=\"https://github.com/sebmarkbage\">@sebmarkbage</a> in <a href=\"https://github-redirect.dependabot.com/facebook/react/pull/17560\">#17560</a>, <a href=\"https://github-redirect.dependabot.com/facebook/react/pull/17510\">#17510</a>, <a href=\"https://github-redirect.dependabot.com/facebook/react/pull/17483\">#17483</a>, <a href=\"https://github-redirect.dependabot.com/facebook/react/pull/17480\">#17480</a>)</li>\n</ul>\n<h2>16.12.0 (November 14, 2019)</h2>\n<h3>React DOM</h3>\n<ul>\n<li>Fix passive effects (<code>useEffect</code>) not being fired in a multi-root app. (<a href=\"https://github.com/acdlite\">@acdlite</a> in <a href=\"https://github-redirect.dependabot.com/facebook/react/pull/17347\">#17347</a>)</li>\n</ul>\n<h3>React Is</h3>\n<!-- raw HTML omitted -->\n</blockquote>\n</details>\n<details>\n<summary>Commits</summary>\n<ul>\n<li><a href=\"https://github.com/facebook/react/commit/c63741fb3daef6c1e8746cbe7d7b07ecb281a9fd\"><code>c63741f</code></a> offscreen double invoke effects (<a href=\"https://github.com/facebook/react/tree/HEAD/packages/react/issues/19523\">#19523</a>)</li>\n<li><a href=\"https://github.com/facebook/react/commit/c6917346ff9f7ebdfbe11b73a72c82153ac704ec\"><code>c691734</code></a> Fixed broken Profiler test (<a href=\"https://github.com/facebook/react/tree/HEAD/packages/react/issues/19894\">#19894</a>)</li>\n<li><a href=\"https://github.com/facebook/react/commit/87c023b1c1b00d6776b7031f6e105913ead355da\"><code>87c023b</code></a> Profiler onRender only called when we do work (<a href=\"https://github.com/facebook/react/tree/HEAD/packages/react/issues/19885\">#19885</a>)</li>\n<li><a href=\"https://github.com/facebook/react/commit/81aaee56afba2bb3558f2aaa484b594f23b59d4c\"><code>81aaee5</code></a> Don't call onCommit et al if there are no effects (<a href=\"https://github.com/facebook/react/tree/HEAD/packages/react/issues/19863\">#19863</a>)</li>\n<li><a href=\"https://github.com/facebook/react/commit/bc6b7b6b16f771bfc8048fe15e211ac777253b64\"><code>bc6b7b6</code></a> Don't trigger lazy in DEV during element creation (<a href=\"https://github.com/facebook/react/tree/HEAD/packages/react/issues/19871\">#19871</a>)</li>\n<li><a href=\"https://github.com/facebook/react/commit/781212aab344b1619806369d768fad0c1ac3e04a\"><code>781212a</code></a> Remove double space in test name (<a href=\"https://github.com/facebook/react/tree/HEAD/packages/react/issues/19762\">#19762</a>)</li>\n<li><a href=\"https://github.com/facebook/react/commit/d17086c7c813402a550d15a2f56dc43f1dbd1735\"><code>d17086c</code></a> Decouple public, internal act implementation (<a href=\"https://github.com/facebook/react/tree/HEAD/packages/react/issues/19745\">#19745</a>)</li>\n<li><a href=\"https://github.com/facebook/react/commit/1f38dcff67d12828be771403e183652f5e93909a\"><code>1f38dcf</code></a> Remove withSuspenseConfig (<a href=\"https://github.com/facebook/react/tree/HEAD/packages/react/issues/19724\">#19724</a>)</li>\n<li><a href=\"https://github.com/facebook/react/commit/ddd1faa1972b614dfbfae205f2aa4a6c0b39a759\"><code>ddd1faa</code></a> Remove config argument from useTransition (<a href=\"https://github.com/facebook/react/tree/HEAD/packages/react/issues/19719\">#19719</a>)</li>\n<li><a href=\"https://github.com/facebook/react/commit/92fcd46cc79bbf45df4ce86b0678dcef3b91078d\"><code>92fcd46</code></a> Replace SuspenseConfig object with an integer (<a href=\"https://github.com/facebook/react/tree/HEAD/packages/react/issues/19706\">#19706</a>)</li>\n<li>Additional commits viewable in <a href=\"https://github.com/facebook/react/commits/v16.14.0/packages/react\">compare view</a></li>\n</ul>\n</details>\n<br />\n\n\n[![Dependabot compatibility score](https://api.dependabot.com/badges/compatibility_score?dependency-name=react&package-manager=npm_and_yarn&previous-version=16.8.4&new-version=16.14.0)](https://dependabot.com/compatibility-score/?dependency-name=react&package-manager=npm_and_yarn&previous-version=16.8.4&new-version=16.14.0)\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n<details>\n<summary>Dependabot commands and options</summary>\n<br />\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot merge` will merge this PR after your CI passes on it\n- `@dependabot squash and merge` will squash and merge this PR after your CI passes on it\n- `@dependabot cancel merge` will cancel a previously requested merge and block automerging\n- `@dependabot reopen` will reopen this PR if it is closed\n- `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually\n- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot use these labels` will set the current labels as the default for future PRs for this repo and language\n- `@dependabot use these reviewers` will set the current reviewers as the default for future PRs for this repo and language\n- `@dependabot use these assignees` will set the current assignees as the default for future PRs for this repo and language\n- `@dependabot use this milestone` will set the current milestone as the default for future PRs for this repo and language\n- `@dependabot badge me` will comment on this PR with code to add a \"Dependabot enabled\" badge to your readme\n\nAdditionally, you can set the following in your Dependabot [dashboard](https://app.dependabot.com):\n- Update frequency (including time of day and day of week)\n- Pull request limits (per update run and/or open at any time)\n- Automerge options (never/patch/minor, and dev/runtime dependencies)\n- Out-of-range updates (receive only lockfile updates, if desired)\n- Security updates (receive only security updates, if desired)\n\n\n\n</details>","created_at":"2020-11-01T04:26:03Z","updated_at":"2020-11-01T04:26:04Z","closed_at":null,"merged_at":null,"merge_commit_sha":"14f58df8694b993dabf5d441d415a8118ccd2d60","assignees":[],"requested_reviewers":[],"requested_teams":[],"labels":[{"id":1224325914,"node_id":"MDU6TGFiZWwxMjI0MzI1OTE0","url":"https://api.github.com/repos/src-d/lookout/labels/dependencies","name":"dependencies","color":"0025ff","default":false,"description":"Pull requests that update a dependency file"},{"id":1225416698,"node_id":"MDU6TGFiZWwxMjI1NDE2Njk4","url":"https://api.github.com/repos/src-d/lookout/labels/javascript","name":"javascript","color":"168700","default":false,"description":"Pull requests that update Javascript code"}],"milestone":null,"draft":false,"commits_url":"https://api.github.com/repos/src-d/lookout/pulls/783/commits","review_comments_url":"https://api.github.com/repos/src-d/lookout/pulls/783/comments","review_comment_url":"https://api.github.com/repos/src-d/lookout/pulls/comments{/number}","comments_url":"https://api.github.com/repos/src-d/lookout/issues/783/comments","statuses_url":"https://api.github.com/repos/src-d/lookout/statuses/85ece3af20a845c2b2f0cff7b6c28e0f3adb51ec","head":{"label":"src-d:dependabot/npm_and_yarn/frontend/react-16.14.0","ref":"dependabot/npm_and_yarn/frontend/react-16.14.0","sha":"85ece3af20a845c2b2f0cff7b6c28e0f3adb51ec","user":{"login":"src-d","id":15128793,"node_id":"MDEyOk9yZ2FuaXphdGlvbjE1MTI4Nzkz","avatar_url":"https://avatars.githubusercontent.com/u/15128793?v=4","gravatar_id":"","url":"https://api.github.com/users/src-d","html_url":"https://github.com/src-d","followers_url":"https://api.github.com/users/src-d/followers","following_url":"https://api.github.com/users/src-d/following{/other_user}","gists_url":"https://api.github.com/users/src-d/gists{/gist_id}","starred_url":"https://api.github.com/users/src-d/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/src-d/subscriptions","organizations_url":"https://api.github.com/users/src-d/orgs","repos_url":"https://api.github.com/users/src-d/repos","events_url":"https://api.github.com/users/src-d/events{/privacy}","received_events_url":"https://api.github.com/users/src-d/received_events","type":"Organization","user_view_type":"public","site_admin":false},"repo":{"id":136146572,"node_id":"MDEwOlJlcG9zaXRvcnkxMzYxNDY1NzI=","name":"lookout","full_name":"src-d/lookout","private":false,"owner":{"login":"src-d","id":15128793,"node_id":"MDEyOk9yZ2FuaXphdGlvbjE1MTI4Nzkz","avatar_url":"https://avatars.githubusercontent.com/u/15128793?v=4","gravatar_id":"","url":"https://api.github.com/users/src-d","html_url":"https://github.com/src-d","followers_url":"https://api.github.com/users/src-d/followers","following_url":"https://api.github.com/users/src-d/following{/other_user}","gists_url":"https://api.github.com/users/src-d/gists{/gist_id}","starred_url":"https://api.github.com/users/src-d/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/src-d/subscriptions","organizations_url":"https://api.github.com/users/src-d/orgs","repos_url":"https://api.github.com/users/src-d/repos","events_url":"https://api.github.com/users/src-d/events{/privacy}","received_events_url":"https://api.github.com/users/src-d/received_events","type":"Organization","user_view_type":"public","site_admin":false},"html_url":"https://github.com/src-d/lookout","description":"Assisted code review, running custom code analyzers on pull requests","fork":false,"url":"https://api.github.com/repos/src-d/lookout","forks_url":"https://api.github.com/repos/src-d/lookout/forks","keys_url":"https://api.github.com/repos/src-d/lookout/keys{/key_id}","collaborators_url":"https://api.github.com/repos/src-d/lookout/collaborators{/collaborator}","teams_url":"https://api.github.com/repos/src-d/lookout/teams","hooks_url":"https://api.github.com/repos/src-d/lookout/hooks","issue_events_url":"https://api.github.com/repos/src-d/lookout/issues/events{/number}","events_url":"https://api.github.com/repos/src-d/lookout/events","assignees_url":"https://api.github.com/repos/src-d/lookout/assignees{/user}","branches_url":"https://api.github.com/repos/src-d/lookout/branches{/branch}","tags_url":"https://api.github.com/repos/src-d/lookout/tags","blobs_url":"https://api.github.com/repos/src-d/lookout/git/blobs{/sha}","git_tags_url":"https://api.github.com/repos/src-d/lookout/git/tags{/sha}","git_refs_url":"https://api.github.com/repos/src-d/lookout/git/refs{/sha}","trees_url":"https://api.github.com/repos/src-d/lookout/git/trees{/sha}","statuses_url":"https://api.github.com/repos/src-d/lookout/statuses/{sha}","languages_url":"https://api.github.com/repos/src-d/lookout/languages","stargazers_url":"https://api.github.com/repos/src-d/lookout/stargazers","contributors_url":"https://api.github.com/repos/src-d/lookout/contributors","subscribers_url":"https://api.github.com/repos/src-d/lookout/subscribers","subscription_url":"https://api.github.com/repos/src-d/lookout/subscription","commits_url":"https://api.github.com/repos/src-d/lookout/commits{/sha}","git_commits_url":"https://api.github.com/repos/src-d/lookout/git/commits{/sha}","comments_url":"https://api.github.com/repos/src-d/lookout/comments{/number}","issue_comment_url":"https://api.github.com/repos/src-d/lookout/issues/comments{/number}","contents_url":"https://api.github.com/repos/src-d/lookout/contents/{+path}","compare_url":"https://api.github.com/repos/src-d/lookout/compare/{base}...{head}","merges_url":"https://api.github.com/repos/src-d/lookout/merges","archive_url":"https://api.github.com/repos/src-d/lookout/{archive_format}{/ref}","downloads_url":"https://api.github.com/repos/src-d/lookout/downloads","issues_url":"https://api.github.com/repos/src-d/lookout/issues{/number}","pulls_url":"https://api.github.com/repos/src-d/lookout/pulls{/number}","milestones_url":"https://api.github.com/repos/src-d/lookout/milestones{/number}","notifications_url":"https://api.github.com/repos/src-d/lookout/notifications{?since,all,participating}","labels_url":"https://api.github.com/repos/src-d/lookout/labels{/name}","releases_url":"https://api.github.com/repos/src-d/lookout/releases{/id}","deployments_url":"https://api.github.com/repos/src-d/lookout/deployments","created_at":"2018-06-05T08:37:23Z","updated_at":"2025-10-05T17:39:33Z","pushed_at":"2021-08-03T19:18:36Z","git_url":"git://github.com/src-d/lookout.git","ssh_url":"git@github.com:src-d/lookout.git","clone_url":"https://github.com/src-d/lookout.git","svn_url":"https://github.com/src-d/lookout","homepage":"https://docs.sourced.tech/lookout","size":60130,"stargazers_count":152,"watchers_count":152,"language":"Go","has_issues":true,"has_projects":false,"has_downloads":true,"has_wiki":false,"has_pages":false,"has_discussions":false,"forks_count":33,"mirror_url":null,"archived":false,"disabled":false,"open_issues_count":84,"license":{"key":"agpl-3.0","name":"GNU Affero General Public License v3.0","spdx_id":"AGPL-3.0","url":"https://api.github.com/licenses/agpl-3.0","node_id":"MDc6TGljZW5zZTE="},"allow_forking":true,"is_template":false,"web_commit_signoff_required":false,"has_pull_requests":true,"pull_request_creation_policy":"all","topics":["code-review","github","lookout"],"visibility":"public","forks":33,"open_issues":84,"watchers":152,"default_branch":"master"}},"base":{"label":"src-d:master","ref":"master","sha":"d5cccd9aed531327965c374533f42e0469af4cda","user":{"login":"src-d","id":15128793,"node_id":"MDEyOk9yZ2FuaXphdGlvbjE1MTI4Nzkz","avatar_url":"https://avatars.githubusercontent.com/u/15128793?v=4","gravatar_id":"","url":"https://api.github.com/users/src-d","html_url":"https://github.com/src-d","followers_url":"https://api.github.com/users/src-d/followers","following_url":"https://api.github.com/users/src-d/following{/other_user}","gists_url":"https://api.github.com/users/src-d/gists{/gist_id}","starred_url":"https://api.github.com/users/src-d/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/src-d/subscriptions","organizations_url":"https://api.github.com/users/src-d/orgs","repos_url":"https://api.github.com/users/src-d/repos","events_url":"https://api.github.com/users/src-d/events{/privacy}","received_events_url":"https://api.github.com/users/src-d/received_events","type":"Organization","user_view_type":"public","site_admin":false},"repo":{"id":136146572,"node_id":"MDEwOlJlcG9zaXRvcnkxMzYxNDY1NzI=","name":"lookout","full_name":"src-d/lookout","private":false,"owner":{"login":"src-d","id":15128793,"node_id":"MDEyOk9yZ2FuaXphdGlvbjE1MTI4Nzkz","avatar_url":"https://avatars.githubusercontent.com/u/15128793?v=4","gravatar_id":"","url":"https://api.github.com/users/src-d","html_url":"https://github.com/src-d","followers_url":"https://api.github.com/users/src-d/followers","following_url":"https://api.github.com/users/src-d/following{/other_user}","gists_url":"https://api.github.com/users/src-d/gists{/gist_id}","starred_url":"https://api.github.com/users/src-d/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/src-d/subscriptions","organizations_url":"https://api.github.com/users/src-d/orgs","repos_url":"https://api.github.com/users/src-d/repos","events_url":"https://api.github.com/users/src-d/events{/privacy}","received_events_url":"https://api.github.com/users/src-d/received_events","type":"Organization","user_view_type":"public","site_admin":false},"html_url":"https://github.com/src-d/lookout","description":"Assisted code review, running custom code analyzers on pull requests","fork":false,"url":"https://api.github.com/repos/src-d/lookout","forks_url":"https://api.github.com/repos/src-d/lookout/forks","keys_url":"https://api.github.com/repos/src-d/lookout/keys{/key_id}","collaborators_url":"https://api.github.com/repos/src-d/lookout/collaborators{/collaborator}","teams_url":"https://api.github.com/repos/src-d/lookout/teams","hooks_url":"https://api.github.com/repos/src-d/lookout/hooks","issue_events_url":"https://api.github.com/repos/src-d/lookout/issues/events{/number}","events_url":"https://api.github.com/repos/src-d/lookout/events","assignees_url":"https://api.github.com/repos/src-d/lookout/assignees{/user}","branches_url":"https://api.github.com/repos/src-d/lookout/branches{/branch}","tags_url":"https://api.github.com/repos/src-d/lookout/tags","blobs_url":"https://api.github.com/repos/src-d/lookout/git/blobs{/sha}","git_tags_url":"https://api.github.com/repos/src-d/lookout/git/tags{/sha}","git_refs_url":"https://api.github.com/repos/src-d/lookout/git/refs{/sha}","trees_url":"https://api.github.com/repos/src-d/lookout/git/trees{/sha}","statuses_url":"https://api.github.com/repos/src-d/lookout/statuses/{sha}","languages_url":"https://api.github.com/repos/src-d/lookout/languages","stargazers_url":"https://api.github.com/repos/src-d/lookout/stargazers","contributors_url":"https://api.github.com/repos/src-d/lookout/contributors","subscribers_url":"https://api.github.com/repos/src-d/lookout/subscribers","subscription_url":"https://api.github.com/repos/src-d/lookout/subscription","commits_url":"https://api.github.com/repos/src-d/lookout/commits{/sha}","git_commits_url":"https://api.github.com/repos/src-d/lookout/git/commits{/sha}","comments_url":"https://api.github.com/repos/src-d/lookout/comments{/number}","issue_comment_url":"https://api.github.com/repos/src-d/lookout/issues/comments{/number}","contents_url":"https://api.github.com/repos/src-d/lookout/contents/{+path}","compare_url":"https://api.github.com/repos/src-d/lookout/compare/{base}...{head}","merges_url":"https://api.github.com/repos/src-d/lookout/merges","archive_url":"https://api.github.com/repos/src-d/lookout/{archive_format}{/ref}","downloads_url":"https://api.github.com/repos/src-d/lookout/downloads","issues_url":"https://api.github.com/repos/src-d/lookout/issues{/number}","pulls_url":"https://api.github.com/repos/src-d/lookout/pulls{/number}","milestones_url":"https://api.github.com/repos/src-d/lookout/milestones{/number}","notifications_url":"https://api.github.com/repos/src-d/lookout/notifications{?since,all,participating}","labels_url":"https://api.github.com/repos/src-d/lookout/labels{/name}","releases_url":"https://api.github.com/repos/src-d/lookout/releases{/id}","deployments_url":"https://api.github.com/repos/src-d/lookout/deployments","created_at":"2018-06-05T08:37:23Z","updated_at":"2025-10-05T17:39:33Z","pushed_at":"2021-08-03T19:18:36Z","git_url":"git://github.com/src-d/lookout.git","ssh_url":"git@github.com:src-d/lookout.git","clone_url":"https://github.com/src-d/lookout.git","svn_url":"https://github.com/src-d/lookout","homepage":"https://docs.sourced.tech/lookout","size":60130,"stargazers_count":152,"watchers_count":152,"language":"Go","has_issues":true,"has_projects":false,"has_downloads":true,"has_wiki":false,"has_pages":false,"has_discussions":false,"forks_count":33,"mirror_url":null,"archived":false,"disabled":false,"open_issues_count":84,"license":{"key":"agpl-3.0","name":"GNU Affero General Public License v3.0","spdx_id":"AGPL-3.0","url":"https://api.github.com/licenses/agpl-3.0","node_id":"MDc6TGljZW5zZTE="},"allow_forking":true,"is_template":false,"web_commit_signoff_required":false,"has_pull_requests":true,"pull_request_creation_policy":"all","topics":["code-review","github","lookout"],"visibility":"public","forks":33,"open_issues":84,"watchers":152,"default_branch":"master"}},"_links":{"self":{"href":"https://api.github.com/repos/src-d/lookout/pulls/783"},"html":{"href":"https://github.com/src-d/lookout/pull/783"},"issue":{"href":"https://api.github.com/repos/src-d/lookout/issues/783"},"comments":{"href":"https://api.github.com/repos/src-d/lookout/issues/783/comments"},"review_comments":{"href":"https://api.github.com/repos/src-d/lookout/pulls/783/comments"},"review_comment":{"href":"https://api.github.com/repos/src-d/lookout/pulls/comments{/number}"},"commits":{"href":"https://api.github.com/repos/src-d/lookout/pulls/783/commits"},"statuses":{"href":"https://api.github.com/repos/src-d/lookout/statuses/85ece3af20a845c2b2f0cff7b6c28e0f3adb51ec"}},"author_association":"NONE","auto_merge":null,"assignee":null,"active_lock_reason":null},{"url":"https://api.github.com/repos/src-d/lookout/pulls/778","id":479944287,"node_id":"MDExOlB1bGxSZXF1ZXN0NDc5OTQ0Mjg3","html_url":"https://github.com/src-d/lookout/pull/778","diff_url":"https://github.com/src-d/lookout/pull/778.diff","patch_url":"https://github.com/src-d/lookout/pull/778.patch","issue_url":"https://api.github.com/repos/src-d/lookout/issues/778","number":778,"state":"open","locked":false,"title":"[Security] Bump http-proxy from 1.17.0 to 1.18.1 in /frontend","user":{"login":"dependabot-preview[bot]","id":27856297,"node_id":"MDM6Qm90Mjc4NTYyOTc=","avatar_url":"https://avatars.githubusercontent.com/in/2141?v=4","gravatar_id":"","url":"https://api.github.com/users/dependabot-preview%5Bbot%5D","html_url":"https://github.com/apps/dependabot-preview","followers_url":"https://api.github.com/users/dependabot-preview%5Bbot%5D/followers","following_url":"https://api.github.com/users/dependabot-preview%5Bbot%5D/following{/other_user}","gists_url":"https://api.github.com/users/dependabot-preview%5Bbot%5D/gists{/gist_id}","starred_url":"https://api.github.com/users/dependabot-preview%5Bbot%5D/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/dependabot-preview%5Bbot%5D/subscriptions","organizations_url":"https://api.github.com/users/dependabot-preview%5Bbot%5D/orgs","repos_url":"https://api.github.com/users/dependabot-preview%5Bbot%5D/repos","events_url":"https://api.github.com/users/dependabot-preview%5Bbot%5D/events{/privacy}","received_events_url":"https://api.github.com/users/dependabot-preview%5Bbot%5D/received_events","type":"Bot","user_view_type":"public","site_admin":false},"body":"Bumps [http-proxy](https://github.com/http-party/node-http-proxy) from 1.17.0 to 1.18.1. **This update includes a security fix.**\n<details>\n<summary>Vulnerabilities fixed</summary>\n<p><em>Sourced from <a href=\"https://github.com/advisories/GHSA-6x33-pw7p-hmpq\">The GitHub Security Advisory Database</a>.</em></p>\n<blockquote>\n<p><strong>Denial of Service in http-proxy</strong>\nVersions of <code>http-proxy</code> prior to 1.18.1 are vulnerable to Denial of Service. An HTTP request with a long body triggers an <code>ERR_HTTP_HEADERS_SENT</code> unhandled exception that crashes the proxy server. This is only possible when the proxy server sets headers in the proxy request using the <code>proxyReq.setHeader</code> function.</p>\n<p>For a proxy server running on <code>http://localhost:3000</code>, the following curl request triggers the unhandled exception:<br />\n<code>curl -XPOST http://localhost:3000 -d &quot;$(python -c 'print(&quot;x&quot;*1025)')&quot;</code></p>\n<h2>Recommendation</h2>\n<p>Upgrade to version 1.18.1 or later</p>\n<p>Affected versions: &lt; 1.18.1</p>\n</blockquote>\n</details>\n<details>\n<summary>Changelog</summary>\n<p><em>Sourced from <a href=\"https://github.com/http-party/node-http-proxy/blob/master/CHANGELOG.md\">http-proxy's changelog</a>.</em></p>\n<blockquote>\n<h2><a href=\"https://github.com/http-party/node-http-proxy/compare/1.18.0...v1.18.1\">v1.18.1</a> - 2020-05-17</h2>\n<h3>Merged</h3>\n<ul>\n<li>Skip sending the proxyReq event when the expect header is present <a href=\"https://github-redirect.dependabot.com/http-party/node-http-proxy/pull/1447\"><code>[#1447](https://github.com/http-party/node-http-proxy/issues/1447)</code></a></li>\n<li>Remove node6 support, add node12 to build <a href=\"https://github-redirect.dependabot.com/http-party/node-http-proxy/pull/1397\"><code>[#1397](https://github.com/http-party/node-http-proxy/issues/1397)</code></a></li>\n</ul>\n<h2><a href=\"https://github.com/http-party/node-http-proxy/compare/1.17.0...1.18.0\">1.18.0</a> - 2019-09-18</h2>\n<h3>Merged</h3>\n<ul>\n<li>Added in auto-changelog module set to keepachangelog format <a href=\"https://github-redirect.dependabot.com/http-party/node-http-proxy/pull/1373\"><code>[#1373](https://github.com/http-party/node-http-proxy/issues/1373)</code></a></li>\n<li>fix 'Modify Response' readme section to avoid unnecessary array copying <a href=\"https://github-redirect.dependabot.com/http-party/node-http-proxy/pull/1300\"><code>[#1300](https://github.com/http-party/node-http-proxy/issues/1300)</code></a></li>\n<li>Fix incorrect target name for reverse proxy example <a href=\"https://github-redirect.dependabot.com/http-party/node-http-proxy/pull/1135\"><code>[#1135](https://github.com/http-party/node-http-proxy/issues/1135)</code></a></li>\n<li>Fix modify response middleware example <a href=\"https://github-redirect.dependabot.com/http-party/node-http-proxy/pull/1139\"><code>[#1139](https://github.com/http-party/node-http-proxy/issues/1139)</code></a></li>\n<li>[dist] Update dependency async to v3 <a href=\"https://github-redirect.dependabot.com/http-party/node-http-proxy/pull/1359\"><code>[#1359](https://github.com/http-party/node-http-proxy/issues/1359)</code></a></li>\n<li>Fix path to local http-proxy in examples. <a href=\"https://github-redirect.dependabot.com/http-party/node-http-proxy/pull/1072\"><code>[#1072](https://github.com/http-party/node-http-proxy/issues/1072)</code></a></li>\n<li>fix reverse-proxy example require path <a href=\"https://github-redirect.dependabot.com/http-party/node-http-proxy/pull/1067\"><code>[#1067](https://github.com/http-party/node-http-proxy/issues/1067)</code></a></li>\n<li>Update README.md <a href=\"https://github-redirect.dependabot.com/http-party/node-http-proxy/pull/970\"><code>[#970](https://github.com/http-party/node-http-proxy/issues/970)</code></a></li>\n<li>[dist] Update dependency request to ~2.88.0 [SECURITY] <a href=\"https://github-redirect.dependabot.com/http-party/node-http-proxy/pull/1357\"><code>[#1357](https://github.com/http-party/node-http-proxy/issues/1357)</code></a></li>\n<li>[dist] Update dependency eventemitter3 to v4 <a href=\"https://github-redirect.dependabot.com/http-party/node-http-proxy/pull/1365\"><code>[#1365](https://github.com/http-party/node-http-proxy/issues/1365)</code></a></li>\n<li>[dist] Update dependency colors to v1 <a href=\"https://github-redirect.dependabot.com/http-party/node-http-proxy/pull/1360\"><code>[#1360](https://github.com/http-party/node-http-proxy/issues/1360)</code></a></li>\n<li>[dist] Update all non-major dependencies <a href=\"https://github-redirect.dependabot.com/http-party/node-http-proxy/pull/1356\"><code>[#1356](https://github.com/http-party/node-http-proxy/issues/1356)</code></a></li>\n<li>[dist] Update dependency agentkeepalive to v4 <a href=\"https://github-redirect.dependabot.com/http-party/node-http-proxy/pull/1358\"><code>[#1358](https://github.com/http-party/node-http-proxy/issues/1358)</code></a></li>\n<li>[dist] Update dependency nyc to v14 <a href=\"https://github-redirect.dependabot.com/http-party/node-http-proxy/pull/1367\"><code>[#1367](https://github.com/http-party/node-http-proxy/issues/1367)</code></a></li>\n<li>[dist] Update dependency concat-stream to v2 <a href=\"https://github-redirect.dependabot.com/http-party/node-http-proxy/pull/1363\"><code>[#1363](https://github.com/http-party/node-http-proxy/issues/1363)</code></a></li>\n<li>x-forwarded-host overwrite for mutli level proxies <a href=\"https://github-redirect.dependabot.com/http-party/node-http-proxy/pull/1267\"><code>[#1267](https://github.com/http-party/node-http-proxy/issues/1267)</code></a></li>\n<li>[refactor doc] Complete rename to http-party org. <a href=\"https://github-redirect.dependabot.com/http-party/node-http-proxy/pull/1362\"><code>[#1362](https://github.com/http-party/node-http-proxy/issues/1362)</code></a></li>\n<li>Highlight correct lines for createProxyServer <a href=\"https://github-redirect.dependabot.com/http-party/node-http-proxy/pull/1117\"><code>[#1117](https://github.com/http-party/node-http-proxy/issues/1117)</code></a></li>\n<li>Fix docs for rewrite options - 201 also handled <a href=\"https://github-redirect.dependabot.com/http-party/node-http-proxy/pull/1147\"><code>[#1147](https://github.com/http-party/node-http-proxy/issues/1147)</code></a></li>\n<li>Update .nyc_output <a href=\"https://github-redirect.dependabot.com/http-party/node-http-proxy/pull/1339\"><code>[#1339](https://github.com/http-party/node-http-proxy/issues/1339)</code></a></li>\n<li>Configure Renovate <a href=\"https://github-redirect.dependabot.com/http-party/node-http-proxy/pull/1355\"><code>[#1355](https://github.com/http-party/node-http-proxy/issues/1355)</code></a></li>\n<li>[examples] Restream body before proxying, support for Content-Type of application/x-www-form-urlencoded <a href=\"https://github-redirect.dependabot.com/http-party/node-http-proxy/pull/1264\"><code>[#1264](https://github.com/http-party/node-http-proxy/issues/1264)</code></a></li>\n</ul>\n<h3>Commits</h3>\n<ul>\n<li>[dist] New test fixtures. <a href=\"https://github.com/http-party/node-http-proxy/commit/7e4a0e511bc30c059216860153301de2cdd1e97f\"><code>7e4a0e5</code></a></li>\n<li>[dist] End of an era. <a href=\"https://github.com/http-party/node-http-proxy/commit/a9b09cce43f072db99fb5170030a05536177ccb7\"><code>a9b09cc</code></a></li>\n<li>[dist] Version bump. 1.18.0 <a href=\"https://github.com/http-party/node-http-proxy/commit/9bbe486c5efcc356fb4d189ef38eee275bbde345\"><code>9bbe486</code></a></li>\n<li>[fix] Latest versions. <a href=\"https://github.com/http-party/node-http-proxy/commit/59c4403e9dc15ab9b19ee2a3f4aecbfc6c3d94c4\"><code>59c4403</code></a></li>\n<li>[fix test] Update tests. <a href=\"https://github.com/http-party/node-http-proxy/commit/dd1d08b6319d1def729554446a5b0176978a8dad\"><code>dd1d08b</code></a></li>\n<li>[dist] Update dependency ws to v3 [SECURITY] <a href=\"https://github.com/http-party/node-http-proxy/commit/b00911c93740a00c5cfbacbb91565cb6912ed255\"><code>b00911c</code></a></li>\n<li>[dist] .gitattributes all the things. <a href=\"https://github.com/http-party/node-http-proxy/commit/fc93520d741ec80be8ae31ca005f3e9c199e330e\"><code>fc93520</code></a></li>\n<li>[dist] Regenerate package-lock.json. <a href=\"https://github.com/http-party/node-http-proxy/commit/16d4f8a95162b2e2e4ee6657c500f1208c044b2d\"><code>16d4f8a</code></a></li>\n</ul>\n</blockquote>\n</details>\n<details>\n<summary>Commits</summary>\n<ul>\n<li><a href=\"https://github.com/http-party/node-http-proxy/commit/9b96cd725127a024dabebec6c7ea8c807272223d\"><code>9b96cd7</code></a> 1.18.1</li>\n<li><a href=\"https://github.com/http-party/node-http-proxy/commit/335aeeba2f0c286dc89c402eeb76af47834c89a3\"><code>335aeeb</code></a> Skip sending the proxyReq event when the expect header is present (<a href=\"https://github-redirect.dependabot.com/http-party/node-http-proxy/issues/1447\">#1447</a>)</li>\n<li><a href=\"https://github.com/http-party/node-http-proxy/commit/dba39668ba4c9ad461316e834b2d64b77e1ca88e\"><code>dba3966</code></a> Remove node6 support, add node12 to build (<a href=\"https://github-redirect.dependabot.com/http-party/node-http-proxy/issues/1397\">#1397</a>)</li>\n<li><a href=\"https://github.com/http-party/node-http-proxy/commit/9bbe486c5efcc356fb4d189ef38eee275bbde345\"><code>9bbe486</code></a> [dist] Version bump. 1.18.0</li>\n<li><a href=\"https://github.com/http-party/node-http-proxy/commit/6e4bef4d1cd96e7a284717941e0fc274acbd3712\"><code>6e4bef4</code></a> Added in auto-changelog module set to keepachangelog format (<a href=\"https://github-redirect.dependabot.com/http-party/node-http-proxy/issues/1373\">#1373</a>)</li>\n<li><a href=\"https://github.com/http-party/node-http-proxy/commit/d05624167ce75e860770c13afeacec2ce0f67add\"><code>d056241</code></a> fix 'Modify Response' readme section to avoid unnecessary array copying (<a href=\"https://github-redirect.dependabot.com/http-party/node-http-proxy/issues/1300\">#1300</a>)</li>\n<li><a href=\"https://github.com/http-party/node-http-proxy/commit/244303b994525684e1ec8dff2e8055f89b62b1ee\"><code>244303b</code></a> Fix incorrect target name for reverse proxy example (<a href=\"https://github-redirect.dependabot.com/http-party/node-http-proxy/issues/1135\">#1135</a>)</li>\n<li><a href=\"https://github.com/http-party/node-http-proxy/commit/b4028ba78bc4616e6969e0e66b0fe4634849b68b\"><code>b4028ba</code></a> Fix modify response middleware example (<a href=\"https://github-redirect.dependabot.com/http-party/node-http-proxy/issues/1139\">#1139</a>)</li>\n<li><a href=\"https://github.com/http-party/node-http-proxy/commit/77a98159d2da0f20a03e2819c79662f36069f234\"><code>77a9815</code></a> [dist] Update dependency async to v3 (<a href=\"https://github-redirect.dependabot.com/http-party/node-http-proxy/issues/1359\">#1359</a>)</li>\n<li><a href=\"https://github.com/http-party/node-http-proxy/commit/c662f9ebcd8d623db374dbc7bef231b2b0af0c3a\"><code>c662f9e</code></a> Fix path to local http-proxy in examples. (<a href=\"https://github-redirect.dependabot.com/http-party/node-http-proxy/issues/1072\">#1072</a>)</li>\n<li>Additional commits viewable in <a href=\"https://github.com/http-party/node-http-proxy/compare/1.17.0...1.18.1\">compare view</a></li>\n</ul>\n</details>\n<br />\n\n\n[![Dependabot compatibility score](https://api.dependabot.com/badges/compatibility_score?dependency-name=http-proxy&package-manager=npm_and_yarn&previous-version=1.17.0&new-version=1.18.1)](https://dependabot.com/compatibility-score/?dependency-name=http-proxy&package-manager=npm_and_yarn&previous-version=1.17.0&new-version=1.18.1)\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n<details>\n<summary>Dependabot commands and options</summary>\n<br />\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot merge` will merge this PR after your CI passes on it\n- `@dependabot squash and merge` will squash and merge this PR after your CI passes on it\n- `@dependabot cancel merge` will cancel a previously requested merge and block automerging\n- `@dependabot reopen` will reopen this PR if it is closed\n- `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually\n- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot use these labels` will set the current labels as the default for future PRs for this repo and language\n- `@dependabot use these reviewers` will set the current reviewers as the default for future PRs for this repo and language\n- `@dependabot use these assignees` will set the current assignees as the default for future PRs for this repo and language\n- `@dependabot use this milestone` will set the current milestone as the default for future PRs for this repo and language\n- `@dependabot badge me` will comment on this PR with code to add a \"Dependabot enabled\" badge to your readme\n\nAdditionally, you can set the following in your Dependabot [dashboard](https://app.dependabot.com):\n- Update frequency (including time of day and day of week)\n- Pull request limits (per update run and/or open at any time)\n- Automerge options (never/patch/minor, and dev/runtime dependencies)\n- Out-of-range updates (receive only lockfile updates, if desired)\n- Security updates (receive only security updates, if desired)\n\n\n\n</details>","created_at":"2020-09-04T18:12:20Z","updated_at":"2020-09-04T18:12:21Z","closed_at":null,"merged_at":null,"merge_commit_sha":"c94609e3ffe9449dc9bacb840a4a69adc073efaf","assignees":[],"requested_reviewers":[],"requested_teams":[],"labels":[{"id":1224325914,"node_id":"MDU6TGFiZWwxMjI0MzI1OTE0","url":"https://api.github.com/repos/src-d/lookout/labels/dependencies","name":"dependencies","color":"0025ff","default":false,"description":"Pull requests that update a dependency file"},{"id":1225416698,"node_id":"MDU6TGFiZWwxMjI1NDE2Njk4","url":"https://api.github.com/repos/src-d/lookout/labels/javascript","name":"javascript","color":"168700","default":false,"description":"Pull requests that update Javascript code"},{"id":1445656551,"node_id":"MDU6TGFiZWwxNDQ1NjU2NTUx","url":"https://api.github.com/repos/src-d/lookout/labels/security","name":"security","color":"ee0701","default":false,"description":"Pull requests that address a security vulnerability"}],"milestone":null,"draft":false,"commits_url":"https://api.github.com/repos/src-d/lookout/pulls/778/commits","review_comments_url":"https://api.github.com/repos/src-d/lookout/pulls/778/comments","review_comment_url":"https://api.github.com/repos/src-d/lookout/pulls/comments{/number}","comments_url":"https://api.github.com/repos/src-d/lookout/issues/778/comments","statuses_url":"https://api.github.com/repos/src-d/lookout/statuses/3aaf73822ae5fb63c39bc18f0d48adc3d14ba5a3","head":{"label":"src-d:dependabot/npm_and_yarn/frontend/http-proxy-1.18.1","ref":"dependabot/npm_and_yarn/frontend/http-proxy-1.18.1","sha":"3aaf73822ae5fb63c39bc18f0d48adc3d14ba5a3","user":{"login":"src-d","id":15128793,"node_id":"MDEyOk9yZ2FuaXphdGlvbjE1MTI4Nzkz","avatar_url":"https://avatars.githubusercontent.com/u/15128793?v=4","gravatar_id":"","url":"https://api.github.com/users/src-d","html_url":"https://github.com/src-d","followers_url":"https://api.github.com/users/src-d/followers","following_url":"https://api.github.com/users/src-d/following{/other_user}","gists_url":"https://api.github.com/users/src-d/gists{/gist_id}","starred_url":"https://api.github.com/users/src-d/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/src-d/subscriptions","organizations_url":"https://api.github.com/users/src-d/orgs","repos_url":"https://api.github.com/users/src-d/repos","events_url":"https://api.github.com/users/src-d/events{/privacy}","received_events_url":"https://api.github.com/users/src-d/received_events","type":"Organization","user_view_type":"public","site_admin":false},"repo":{"id":136146572,"node_id":"MDEwOlJlcG9zaXRvcnkxMzYxNDY1NzI=","name":"lookout","full_name":"src-d/lookout","private":false,"owner":{"login":"src-d","id":15128793,"node_id":"MDEyOk9yZ2FuaXphdGlvbjE1MTI4Nzkz","avatar_url":"https://avatars.githubusercontent.com/u/15128793?v=4","gravatar_id":"","url":"https://api.github.com/users/src-d","html_url":"https://github.com/src-d","followers_url":"https://api.github.com/users/src-d/followers","following_url":"https://api.github.com/users/src-d/following{/other_user}","gists_url":"https://api.github.com/users/src-d/gists{/gist_id}","starred_url":"https://api.github.com/users/src-d/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/src-d/subscriptions","organizations_url":"https://api.github.com/users/src-d/orgs","repos_url":"https://api.github.com/users/src-d/repos","events_url":"https://api.github.com/users/src-d/events{/privacy}","received_events_url":"https://api.github.com/users/src-d/received_events","type":"Organization","user_view_type":"public","site_admin":false},"html_url":"https://github.com/src-d/lookout","description":"Assisted code review, running custom code analyzers on pull requests","fork":false,"url":"https://api.github.com/repos/src-d/lookout","forks_url":"https://api.github.com/repos/src-d/lookout/forks","keys_url":"https://api.github.com/repos/src-d/lookout/keys{/key_id}","collaborators_url":"https://api.github.com/repos/src-d/lookout/collaborators{/collaborator}","teams_url":"https://api.github.com/repos/src-d/lookout/teams","hooks_url":"https://api.github.com/repos/src-d/lookout/hooks","issue_events_url":"https://api.github.com/repos/src-d/lookout/issues/events{/number}","events_url":"https://api.github.com/repos/src-d/lookout/events","assignees_url":"https://api.github.com/repos/src-d/lookout/assignees{/user}","branches_url":"https://api.github.com/repos/src-d/lookout/branches{/branch}","tags_url":"https://api.github.com/repos/src-d/lookout/tags","blobs_url":"https://api.github.com/repos/src-d/lookout/git/blobs{/sha}","git_tags_url":"https://api.github.com/repos/src-d/lookout/git/tags{/sha}","git_refs_url":"https://api.github.com/repos/src-d/lookout/git/refs{/sha}","trees_url":"https://api.github.com/repos/src-d/lookout/git/trees{/sha}","statuses_url":"https://api.github.com/repos/src-d/lookout/statuses/{sha}","languages_url":"https://api.github.com/repos/src-d/lookout/languages","stargazers_url":"https://api.github.com/repos/src-d/lookout/stargazers","contributors_url":"https://api.github.com/repos/src-d/lookout/contributors","subscribers_url":"https://api.github.com/repos/src-d/lookout/subscribers","subscription_url":"https://api.github.com/repos/src-d/lookout/subscription","commits_url":"https://api.github.com/repos/src-d/lookout/commits{/sha}","git_commits_url":"https://api.github.com/repos/src-d/lookout/git/commits{/sha}","comments_url":"https://api.github.com/repos/src-d/lookout/comments{/number}","issue_comment_url":"https://api.github.com/repos/src-d/lookout/issues/comments{/number}","contents_url":"https://api.github.com/repos/src-d/lookout/contents/{+path}","compare_url":"https://api.github.com/repos/src-d/lookout/compare/{base}...{head}","merges_url":"https://api.github.com/repos/src-d/lookout/merges","archive_url":"https://api.github.com/repos/src-d/lookout/{archive_format}{/ref}","downloads_url":"https://api.github.com/repos/src-d/lookout/downloads","issues_url":"https://api.github.com/repos/src-d/lookout/issues{/number}","pulls_url":"https://api.github.com/repos/src-d/lookout/pulls{/number}","milestones_url":"https://api.github.com/repos/src-d/lookout/milestones{/number}","notifications_url":"https://api.github.com/repos/src-d/lookout/notifications{?since,all,participating}","labels_url":"https://api.github.com/repos/src-d/lookout/labels{/name}","releases_url":"https://api.github.com/repos/src-d/lookout/releases{/id}","deployments_url":"https://api.github.com/repos/src-d/lookout/deployments","created_at":"2018-06-05T08:37:23Z","updated_at":"2025-10-05T17:39:33Z","pushed_at":"2021-08-03T19:18:36Z","git_url":"git://github.com/src-d/lookout.git","ssh_url":"git@github.com:src-d/lookout.git","clone_url":"https://github.com/src-d/lookout.git","svn_url":"https://github.com/src-d/lookout","homepage":"https://docs.sourced.tech/lookout","size":60130,"stargazers_count":152,"watchers_count":152,"language":"Go","has_issues":true,"has_projects":false,"has_downloads":true,"has_wiki":false,"has_pages":false,"has_discussions":false,"forks_count":33,"mirror_url":null,"archived":false,"disabled":false,"open_issues_count":84,"license":{"key":"agpl-3.0","name":"GNU Affero General Public License v3.0","spdx_id":"AGPL-3.0","url":"https://api.github.com/licenses/agpl-3.0","node_id":"MDc6TGljZW5zZTE="},"allow_forking":true,"is_template":false,"web_commit_signoff_required":false,"has_pull_requests":true,"pull_request_creation_policy":"all","topics":["code-review","github","lookout"],"visibility":"public","forks":33,"open_issues":84,"watchers":152,"default_branch":"master"}},"base":{"label":"src-d:master","ref":"master","sha":"d5cccd9aed531327965c374533f42e0469af4cda","user":{"login":"src-d","id":15128793,"node_id":"MDEyOk9yZ2FuaXphdGlvbjE1MTI4Nzkz","avatar_url":"https://avatars.githubusercontent.com/u/15128793?v=4","gravatar_id":"","url":"https://api.github.com/users/src-d","html_url":"https://github.com/src-d","followers_url":"https://api.github.com/users/src-d/followers","following_url":"https://api.github.com/users/src-d/following{/other_user}","gists_url":"https://api.github.com/users/src-d/gists{/gist_id}","starred_url":"https://api.github.com/users/src-d/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/src-d/subscriptions","organizations_url":"https://api.github.com/users/src-d/orgs","repos_url":"https://api.github.com/users/src-d/repos","events_url":"https://api.github.com/users/src-d/events{/privacy}","received_events_url":"https://api.github.com/users/src-d/received_events","type":"Organization","user_view_type":"public","site_admin":false},"repo":{"id":136146572,"node_id":"MDEwOlJlcG9zaXRvcnkxMzYxNDY1NzI=","name":"lookout","full_name":"src-d/lookout","private":false,"owner":{"login":"src-d","id":15128793,"node_id":"MDEyOk9yZ2FuaXphdGlvbjE1MTI4Nzkz","avatar_url":"https://avatars.githubusercontent.com/u/15128793?v=4","gravatar_id":"","url":"https://api.github.com/users/src-d","html_url":"https://github.com/src-d","followers_url":"https://api.github.com/users/src-d/followers","following_url":"https://api.github.com/users/src-d/following{/other_user}","gists_url":"https://api.github.com/users/src-d/gists{/gist_id}","starred_url":"https://api.github.com/users/src-d/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/src-d/subscriptions","organizations_url":"https://api.github.com/users/src-d/orgs","repos_url":"https://api.github.com/users/src-d/repos","events_url":"https://api.github.com/users/src-d/events{/privacy}","received_events_url":"https://api.github.com/users/src-d/received_events","type":"Organization","user_view_type":"public","site_admin":false},"html_url":"https://github.com/src-d/lookout","description":"Assisted code review, running custom code analyzers on pull requests","fork":false,"url":"https://api.github.com/repos/src-d/lookout","forks_url":"https://api.github.com/repos/src-d/lookout/forks","keys_url":"https://api.github.com/repos/src-d/lookout/keys{/key_id}","collaborators_url":"https://api.github.com/repos/src-d/lookout/collaborators{/collaborator}","teams_url":"https://api.github.com/repos/src-d/lookout/teams","hooks_url":"https://api.github.com/repos/src-d/lookout/hooks","issue_events_url":"https://api.github.com/repos/src-d/lookout/issues/events{/number}","events_url":"https://api.github.com/repos/src-d/lookout/events","assignees_url":"https://api.github.com/repos/src-d/lookout/assignees{/user}","branches_url":"https://api.github.com/repos/src-d/lookout/branches{/branch}","tags_url":"https://api.github.com/repos/src-d/lookout/tags","blobs_url":"https://api.github.com/repos/src-d/lookout/git/blobs{/sha}","git_tags_url":"https://api.github.com/repos/src-d/lookout/git/tags{/sha}","git_refs_url":"https://api.github.com/repos/src-d/lookout/git/refs{/sha}","trees_url":"https://api.github.com/repos/src-d/lookout/git/trees{/sha}","statuses_url":"https://api.github.com/repos/src-d/lookout/statuses/{sha}","languages_url":"https://api.github.com/repos/src-d/lookout/languages","stargazers_url":"https://api.github.com/repos/src-d/lookout/stargazers","contributors_url":"https://api.github.com/repos/src-d/lookout/contributors","subscribers_url":"https://api.github.com/repos/src-d/lookout/subscribers","subscription_url":"https://api.github.com/repos/src-d/lookout/subscription","commits_url":"https://api.github.com/repos/src-d/lookout/commits{/sha}","git_commits_url":"https://api.github.com/repos/src-d/lookout/git/commits{/sha}","comments_url":"https://api.github.com/repos/src-d/lookout/comments{/number}","issue_comment_url":"https://api.github.com/repos/src-d/lookout/issues/comments{/number}","contents_url":"https://api.github.com/repos/src-d/lookout/contents/{+path}","compare_url":"https://api.github.com/repos/src-d/lookout/compare/{base}...{head}","merges_url":"https://api.github.com/repos/src-d/lookout/merges","archive_url":"https://api.github.com/repos/src-d/lookout/{archive_format}{/ref}","downloads_url":"https://api.github.com/repos/src-d/lookout/downloads","issues_url":"https://api.github.com/repos/src-d/lookout/issues{/number}","pulls_url":"https://api.github.com/repos/src-d/lookout/pulls{/number}","milestones_url":"https://api.github.com/repos/src-d/lookout/milestones{/number}","notifications_url":"https://api.github.com/repos/src-d/lookout/notifications{?since,all,participating}","labels_url":"https://api.github.com/repos/src-d/lookout/labels{/name}","releases_url":"https://api.github.com/repos/src-d/lookout/releases{/id}","deployments_url":"https://api.github.com/repos/src-d/lookout/deployments","created_at":"2018-06-05T08:37:23Z","updated_at":"2025-10-05T17:39:33Z","pushed_at":"2021-08-03T19:18:36Z","git_url":"git://github.com/src-d/lookout.git","ssh_url":"git@github.com:src-d/lookout.git","clone_url":"https://github.com/src-d/lookout.git","svn_url":"https://github.com/src-d/lookout","homepage":"https://docs.sourced.tech/lookout","size":60130,"stargazers_count":152,"watchers_count":152,"language":"Go","has_issues":true,"has_projects":false,"has_downloads":true,"has_wiki":false,"has_pages":false,"has_discussions":false,"forks_count":33,"mirror_url":null,"archived":false,"disabled":false,"open_issues_count":84,"license":{"key":"agpl-3.0","name":"GNU Affero General Public License v3.0","spdx_id":"AGPL-3.0","url":"https://api.github.com/licenses/agpl-3.0","node_id":"MDc6TGljZW5zZTE="},"allow_forking":true,"is_template":false,"web_commit_signoff_required":false,"has_pull_requests":true,"pull_request_creation_policy":"all","topics":["code-review","github","lookout"],"visibility":"public","forks":33,"open_issues":84,"watchers":152,"default_branch":"master"}},"_links":{"self":{"href":"https://api.github.com/repos/src-d/lookout/pulls/778"},"html":{"href":"https://github.com/src-d/lookout/pull/778"},"issue":{"href":"https://api.github.com/repos/src-d/lookout/issues/778"},"comments":{"href":"https://api.github.com/repos/src-d/lookout/issues/778/comments"},"review_comments":{"href":"https://api.github.com/repos/src-d/lookout/pulls/778/comments"},"review_comment":{"href":"https://api.github.com/repos/src-d/lookout/pulls/comments{/number}"},"commits":{"href":"https://api.github.com/repos/src-d/lookout/pulls/778/commits"},"statuses":{"href":"https://api.github.com/repos/src-d/lookout/statuses/3aaf73822ae5fb63c39bc18f0d48adc3d14ba5a3"}},"author_association":"NONE","auto_merge":null,"assignee":null,"active_lock_reason":null},{"url":"https://api.github.com/repos/src-d/lookout/pulls/764","id":442452544,"node_id":"MDExOlB1bGxSZXF1ZXN0NDQyNDUyNTQ0","html_url":"https://github.com/src-d/lookout/pull/764","diff_url":"https://github.com/src-d/lookout/pull/764.diff","patch_url":"https://github.com/src-d/lookout/pull/764.patch","issue_url":"https://api.github.com/repos/src-d/lookout/issues/764","number":764,"state":"open","locked":false,"title":"Bump history from 4.7.2 to 5.0.0 in /frontend","user":{"login":"dependabot-preview[bot]","id":27856297,"node_id":"MDM6Qm90Mjc4NTYyOTc=","avatar_url":"https://avatars.githubusercontent.com/in/2141?v=4","gravatar_id":"","url":"https://api.github.com/users/dependabot-preview%5Bbot%5D","html_url":"https://github.com/apps/dependabot-preview","followers_url":"https://api.github.com/users/dependabot-preview%5Bbot%5D/followers","following_url":"https://api.github.com/users/dependabot-preview%5Bbot%5D/following{/other_user}","gists_url":"https://api.github.com/users/dependabot-preview%5Bbot%5D/gists{/gist_id}","starred_url":"https://api.github.com/users/dependabot-preview%5Bbot%5D/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/dependabot-preview%5Bbot%5D/subscriptions","organizations_url":"https://api.github.com/users/dependabot-preview%5Bbot%5D/orgs","repos_url":"https://api.github.com/users/dependabot-preview%5Bbot%5D/repos","events_url":"https://api.github.com/users/dependabot-preview%5Bbot%5D/events{/privacy}","received_events_url":"https://api.github.com/users/dependabot-preview%5Bbot%5D/received_events","type":"Bot","user_view_type":"public","site_admin":false},"body":"Bumps [history](https://github.com/ReactTraining/history) from 4.7.2 to 5.0.0.\n<details>\n<summary>Release notes</summary>\n<p><em>Sourced from <a href=\"https://github.com/ReactTraining/history/releases\">history's releases</a>.</em></p>\n<blockquote>\n<h2>v5.0.0</h2>\n<p>Today we are very pleased to announce the stable release of history version 5!</p>\n<h2>Overview</h2>\n<p>This version includes many enhancements and fixes a few important issues with the library.</p>\n<h3>New Features</h3>\n<ul>\n<li>Hash history now has support for <code>location.state</code></li>\n<li>Better <code>history.block</code> API, with support for retrying transitions</li>\n<li>Full TypeScript declarations and IntelliSense docs</li>\n<li>Adds development and production builds for <code>&lt;script type=module&gt;</code> users</li>\n<li>Both browser and hash history have support for iframes (custom <code>window</code> objects)</li>\n<li>About 50% smaller than v4 (and no dependencies)</li>\n</ul>\n<h3>Bugfixes</h3>\n<ul>\n<li>Fixed some long-standing encoding issues with <code>location.pathname</code></li>\n<li>Removed unfixable warnings about pushing the same path in hash history</li>\n<li>Renamed browser global to <code>HistoryLibrary</code> so it doesn't conflict with <code>window.History</code></li>\n</ul>\n<h3>Breaking Changes</h3>\n<ul>\n<li>Removed support for browsers that do not support the HTML5 history API (no <code>pushState</code>)</li>\n<li>Removed relative pathname support in hash history and memory history</li>\n<li>Removed <code>getUserConfirmation</code>, <code>keyLength</code>, and <code>hashType</code> APIs</li>\n</ul>\n<h2>Usage</h2>\n<p>Please refer to <a href=\"https://github.com/ReactTraining/history/blob/master/docs/installation.md\">our installation guide</a> for instructions about how to install the library.</p>\n<p>There is also <a href=\"https://github.com/ReactTraining/history/blob/master/docs/getting-started.md\">a getting started guide</a> as well as <a href=\"https://github.com/ReactTraining/history/blob/master/docs/api-reference.md\">a complete API reference</a> in the <code>docs</code> folder.</p>\n<p>We are very excited about this release, especially because it will serve as the foundation for the upcoming release of <a href=\"https://reactrouter.com\">React Router</a> version 6.</p>\n<p>Thank you for your support. Enjoy! 😀</p>\n<h2>v5.0.0-beta.8</h2>\n<p>[You can track v5 beta progress in <a href=\"https://github-redirect.dependabot.com/ReactTraining/history/issues/751\">#751</a>](<a href=\"https://github-redirect.dependabot.com/ReactTraining/history/pull/751\">ReactTraining/history#751</a>)</p>\n<p>You can install the v5 beta using the <code>next</code> tag: <code>npm add history@next</code></p>\n<p><strong>Changes</strong></p>\n<p>In this release the core library was converted to TypeScript, and the type declaration files that are published with the npm package are derived from the source instead of being written by hand. This should make them both more accurate and more useful.</p>\n<p>A migration guide will be available soon. For now, you can either browse around <a href=\"https://github.com/ReactTraining/history/tree/dev/docs\">the docs on the <code>dev</code> branch</a> or <a href=\"https://github.com/ReactTraining/history/tree/dev/modules/__tests__\">the tests</a>.</p>\n<p>Enjoy!</p>\n<!-- raw HTML omitted -->\n</blockquote>\n</details>\n<details>\n<summary>Commits</summary>\n<ul>\n<li><a href=\"https://github.com/ReactTraining/history/commit/026d9e56bdee4e05341b70bae1fb6261fdb80bf0\"><code>026d9e5</code></a> Version 5.0.0</li>\n<li><a href=\"https://github.com/ReactTraining/history/commit/ef40006b921c57ef03ae5e5ec6376072095485b1\"><code>ef40006</code></a> Remove api doc generation script</li>\n<li><a href=\"https://github.com/ReactTraining/history/commit/9930845d298be5d3bd55b0542d1f670ecf1a4141\"><code>9930845</code></a> Update doc links to master branch</li>\n<li><a href=\"https://github.com/ReactTraining/history/commit/987ff43e4489c84c62d1758706d09a38ed100030\"><code>987ff43</code></a> Add some more type declarations</li>\n<li><a href=\"https://github.com/ReactTraining/history/commit/4ab6a42082e768b4eafb2b0692220595b8f4feba\"><code>4ab6a42</code></a> Restore syntax highlights in declaration blocks</li>\n<li><a href=\"https://github.com/ReactTraining/history/commit/41bacf07dfc317f08c2a7b6222cbd6de7736e9f9\"><code>41bacf0</code></a> Add more links to doc comments</li>\n<li><a href=\"https://github.com/ReactTraining/history/commit/a7ae54c646c8f8cf067359ba28b0dcd5fbf5a254\"><code>a7ae54c</code></a> More docs + IntelliSense doc comments</li>\n<li><a href=\"https://github.com/ReactTraining/history/commit/1babffe4082c76ed414d5ada7b2c41b3e074d15a\"><code>1babffe</code></a> Update API docs</li>\n<li><a href=\"https://github.com/ReactTraining/history/commit/0f95d29539cc6c7b30d4540852d3821ccaf09bd5\"><code>0f95d29</code></a> More tweaks to API docs</li>\n<li><a href=\"https://github.com/ReactTraining/history/commit/f88b17451df20db28d92222537bed0f327952834\"><code>f88b174</code></a> Small tweaks to api reference</li>\n<li>Additional commits viewable in <a href=\"https://github.com/ReactTraining/history/compare/v4.7.2...v5.0.0\">compare view</a></li>\n</ul>\n</details>\n<br />\n\n\n[![Dependabot compatibility score](https://api.dependabot.com/badges/compatibility_score?dependency-name=history&package-manager=npm_and_yarn&previous-version=4.7.2&new-version=5.0.0)](https://dependabot.com/compatibility-score/?dependency-name=history&package-manager=npm_and_yarn&previous-version=4.7.2&new-version=5.0.0)\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n<details>\n<summary>Dependabot commands and options</summary>\n<br />\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot merge` will merge this PR after your CI passes on it\n- `@dependabot squash and merge` will squash and merge this PR after your CI passes on it\n- `@dependabot cancel merge` will cancel a previously requested merge and block automerging\n- `@dependabot reopen` will reopen this PR if it is closed\n- `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually\n- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot use these labels` will set the current labels as the default for future PRs for this repo and language\n- `@dependabot use these reviewers` will set the current reviewers as the default for future PRs for this repo and language\n- `@dependabot use these assignees` will set the current assignees as the default for future PRs for this repo and language\n- `@dependabot use this milestone` will set the current milestone as the default for future PRs for this repo and language\n- `@dependabot badge me` will comment on this PR with code to add a \"Dependabot enabled\" badge to your readme\n\nAdditionally, you can set the following in your Dependabot [dashboard](https://app.dependabot.com):\n- Update frequency (including time of day and day of week)\n- Pull request limits (per update run and/or open at any time)\n- Automerge options (never/patch/minor, and dev/runtime dependencies)\n- Out-of-range updates (receive only lockfile updates, if desired)\n- Security updates (receive only security updates, if desired)\n\n\n\n</details>","created_at":"2020-07-01T05:31:22Z","updated_at":"2020-07-01T05:31:23Z","closed_at":null,"merged_at":null,"merge_commit_sha":"039188c8ec2aa85e67da9757cfbfbb473ca6c58e","assignees":[],"requested_reviewers":[],"requested_teams":[],"labels":[{"id":1224325914,"node_id":"MDU6TGFiZWwxMjI0MzI1OTE0","url":"https://api.github.com/repos/src-d/lookout/labels/dependencies","name":"dependencies","color":"0025ff","default":false,"description":"Pull requests that update a dependency file"},{"id":1225416698,"node_id":"MDU6TGFiZWwxMjI1NDE2Njk4","url":"https://api.github.com/repos/src-d/lookout/labels/javascript","name":"javascript","color":"168700","default":false,"description":"Pull requests that update Javascript code"}],"milestone":null,"draft":false,"commits_url":"https://api.github.com/repos/src-d/lookout/pulls/764/commits","review_comments_url":"https://api.github.com/repos/src-d/lookout/pulls/764/comments","review_comment_url":"https://api.github.com/repos/src-d/lookout/pulls/comments{/number}","comments_url":"https://api.github.com/repos/src-d/lookout/issues/764/comments","statuses_url":"https://api.github.com/repos/src-d/lookout/statuses/91747cde42d99a78d3ce674f54713528d57c600c","head":{"label":"src-d:dependabot/npm_and_yarn/frontend/history-5.0.0","ref":"dependabot/npm_and_yarn/frontend/history-5.0.0","sha":"91747cde42d99a78d3ce674f54713528d57c600c","user":{"login":"src-d","id":15128793,"node_id":"MDEyOk9yZ2FuaXphdGlvbjE1MTI4Nzkz","avatar_url":"https://avatars.githubusercontent.com/u/15128793?v=4","gravatar_id":"","url":"https://api.github.com/users/src-d","html_url":"https://github.com/src-d","followers_url":"https://api.github.com/users/src-d/followers","following_url":"https://api.github.com/users/src-d/following{/other_user}","gists_url":"https://api.github.com/users/src-d/gists{/gist_id}","starred_url":"https://api.github.com/users/src-d/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/src-d/subscriptions","organizations_url":"https://api.github.com/users/src-d/orgs","repos_url":"https://api.github.com/users/src-d/repos","events_url":"https://api.github.com/users/src-d/events{/privacy}","received_events_url":"https://api.github.com/users/src-d/received_events","type":"Organization","user_view_type":"public","site_admin":false},"repo":{"id":136146572,"node_id":"MDEwOlJlcG9zaXRvcnkxMzYxNDY1NzI=","name":"lookout","full_name":"src-d/lookout","private":false,"owner":{"login":"src-d","id":15128793,"node_id":"MDEyOk9yZ2FuaXphdGlvbjE1MTI4Nzkz","avatar_url":"https://avatars.githubusercontent.com/u/15128793?v=4","gravatar_id":"","url":"https://api.github.com/users/src-d","html_url":"https://github.com/src-d","followers_url":"https://api.github.com/users/src-d/followers","following_url":"https://api.github.com/users/src-d/following{/other_user}","gists_url":"https://api.github.com/users/src-d/gists{/gist_id}","starred_url":"https://api.github.com/users/src-d/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/src-d/subscriptions","organizations_url":"https://api.github.com/users/src-d/orgs","repos_url":"https://api.github.com/users/src-d/repos","events_url":"https://api.github.com/users/src-d/events{/privacy}","received_events_url":"https://api.github.com/users/src-d/received_events","type":"Organization","user_view_type":"public","site_admin":false},"html_url":"https://github.com/src-d/lookout","description":"Assisted code review, running custom code analyzers on pull requests","fork":false,"url":"https://api.github.com/repos/src-d/lookout","forks_url":"https://api.github.com/repos/src-d/lookout/forks","keys_url":"https://api.github.com/repos/src-d/lookout/keys{/key_id}","collaborators_url":"https://api.github.com/repos/src-d/lookout/collaborators{/collaborator}","teams_url":"https://api.github.com/repos/src-d/lookout/teams","hooks_url":"https://api.github.com/repos/src-d/lookout/hooks","issue_events_url":"https://api.github.com/repos/src-d/lookout/issues/events{/number}","events_url":"https://api.github.com/repos/src-d/lookout/events","assignees_url":"https://api.github.com/repos/src-d/lookout/assignees{/user}","branches_url":"https://api.github.com/repos/src-d/lookout/branches{/branch}","tags_url":"https://api.github.com/repos/src-d/lookout/tags","blobs_url":"https://api.github.com/repos/src-d/lookout/git/blobs{/sha}","git_tags_url":"https://api.github.com/repos/src-d/lookout/git/tags{/sha}","git_refs_url":"https://api.github.com/repos/src-d/lookout/git/refs{/sha}","trees_url":"https://api.github.com/repos/src-d/lookout/git/trees{/sha}","statuses_url":"https://api.github.com/repos/src-d/lookout/statuses/{sha}","languages_url":"https://api.github.com/repos/src-d/lookout/languages","stargazers_url":"https://api.github.com/repos/src-d/lookout/stargazers","contributors_url":"https://api.github.com/repos/src-d/lookout/contributors","subscribers_url":"https://api.github.com/repos/src-d/lookout/subscribers","subscription_url":"https://api.github.com/repos/src-d/lookout/subscription","commits_url":"https://api.github.com/repos/src-d/lookout/commits{/sha}","git_commits_url":"https://api.github.com/repos/src-d/lookout/git/commits{/sha}","comments_url":"https://api.github.com/repos/src-d/lookout/comments{/number}","issue_comment_url":"https://api.github.com/repos/src-d/lookout/issues/comments{/number}","contents_url":"https://api.github.com/repos/src-d/lookout/contents/{+path}","compare_url":"https://api.github.com/repos/src-d/lookout/compare/{base}...{head}","merges_url":"https://api.github.com/repos/src-d/lookout/merges","archive_url":"https://api.github.com/repos/src-d/lookout/{archive_format}{/ref}","downloads_url":"https://api.github.com/repos/src-d/lookout/downloads","issues_url":"https://api.github.com/repos/src-d/lookout/issues{/number}","pulls_url":"https://api.github.com/repos/src-d/lookout/pulls{/number}","milestones_url":"https://api.github.com/repos/src-d/lookout/milestones{/number}","notifications_url":"https://api.github.com/repos/src-d/lookout/notifications{?since,all,participating}","labels_url":"https://api.github.com/repos/src-d/lookout/labels{/name}","releases_url":"https://api.github.com/repos/src-d/lookout/releases{/id}","deployments_url":"https://api.github.com/repos/src-d/lookout/deployments","created_at":"2018-06-05T08:37:23Z","updated_at":"2025-10-05T17:39:33Z","pushed_at":"2021-08-03T19:18:36Z","git_url":"git://github.com/src-d/lookout.git","ssh_url":"git@github.com:src-d/lookout.git","clone_url":"https://github.com/src-d/lookout.git","svn_url":"https://github.com/src-d/lookout","homepage":"https://docs.sourced.tech/lookout","size":60130,"stargazers_count":152,"watchers_count":152,"language":"Go","has_issues":true,"has_projects":false,"has_downloads":true,"has_wiki":false,"has_pages":false,"has_discussions":false,"forks_count":33,"mirror_url":null,"archived":false,"disabled":false,"open_issues_count":84,"license":{"key":"agpl-3.0","name":"GNU Affero General Public License v3.0","spdx_id":"AGPL-3.0","url":"https://api.github.com/licenses/agpl-3.0","node_id":"MDc6TGljZW5zZTE="},"allow_forking":true,"is_template":false,"web_commit_signoff_required":false,"has_pull_requests":true,"pull_request_creation_policy":"all","topics":["code-review","github","lookout"],"visibility":"public","forks":33,"open_issues":84,"watchers":152,"default_branch":"master"}},"base":{"label":"src-d:master","ref":"master","sha":"d5cccd9aed531327965c374533f42e0469af4cda","user":{"login":"src-d","id":15128793,"node_id":"MDEyOk9yZ2FuaXphdGlvbjE1MTI4Nzkz","avatar_url":"https://avatars.githubusercontent.com/u/15128793?v=4","gravatar_id":"","url":"https://api.github.com/users/src-d","html_url":"https://github.com/src-d","followers_url":"https://api.github.com/users/src-d/followers","following_url":"https://api.github.com/users/src-d/following{/other_user}","gists_url":"https://api.github.com/users/src-d/gists{/gist_id}","starred_url":"https://api.github.com/users/src-d/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/src-d/subscriptions","organizations_url":"https://api.github.com/users/src-d/orgs","repos_url":"https://api.github.com/users/src-d/repos","events_url":"https://api.github.com/users/src-d/events{/privacy}","received_events_url":"https://api.github.com/users/src-d/received_events","type":"Organization","user_view_type":"public","site_admin":false},"repo":{"id":136146572,"node_id":"MDEwOlJlcG9zaXRvcnkxMzYxNDY1NzI=","name":"lookout","full_name":"src-d/lookout","private":false,"owner":{"login":"src-d","id":15128793,"node_id":"MDEyOk9yZ2FuaXphdGlvbjE1MTI4Nzkz","avatar_url":"https://avatars.githubusercontent.com/u/15128793?v=4","gravatar_id":"","url":"https://api.github.com/users/src-d","html_url":"https://github.com/src-d","followers_url":"https://api.github.com/users/src-d/followers","following_url":"https://api.github.com/users/src-d/following{/other_user}","gists_url":"https://api.github.com/users/src-d/gists{/gist_id}","starred_url":"https://api.github.com/users/src-d/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/src-d/subscriptions","organizations_url":"https://api.github.com/users/src-d/orgs","repos_url":"https://api.github.com/users/src-d/repos","events_url":"https://api.github.com/users/src-d/events{/privacy}","received_events_url":"https://api.github.com/users/src-d/received_events","type":"Organization","user_view_type":"public","site_admin":false},"html_url":"https://github.com/src-d/lookout","description":"Assisted code review, running custom code analyzers on pull requests","fork":false,"url":"https://api.github.com/repos/src-d/lookout","forks_url":"https://api.github.com/repos/src-d/lookout/forks","keys_url":"https://api.github.com/repos/src-d/lookout/keys{/key_id}","collaborators_url":"https://api.github.com/repos/src-d/lookout/collaborators{/collaborator}","teams_url":"https://api.github.com/repos/src-d/lookout/teams","hooks_url":"https://api.github.com/repos/src-d/lookout/hooks","issue_events_url":"https://api.github.com/repos/src-d/lookout/issues/events{/number}","events_url":"https://api.github.com/repos/src-d/lookout/events","assignees_url":"https://api.github.com/repos/src-d/lookout/assignees{/user}","branches_url":"https://api.github.com/repos/src-d/lookout/branches{/branch}","tags_url":"https://api.github.com/repos/src-d/lookout/tags","blobs_url":"https://api.github.com/repos/src-d/lookout/git/blobs{/sha}","git_tags_url":"https://api.github.com/repos/src-d/lookout/git/tags{/sha}","git_refs_url":"https://api.github.com/repos/src-d/lookout/git/refs{/sha}","trees_url":"https://api.github.com/repos/src-d/lookout/git/trees{/sha}","statuses_url":"https://api.github.com/repos/src-d/lookout/statuses/{sha}","languages_url":"https://api.github.com/repos/src-d/lookout/languages","stargazers_url":"https://api.github.com/repos/src-d/lookout/stargazers","contributors_url":"https://api.github.com/repos/src-d/lookout/contributors","subscribers_url":"https://api.github.com/repos/src-d/lookout/subscribers","subscription_url":"https://api.github.com/repos/src-d/lookout/subscription","commits_url":"https://api.github.com/repos/src-d/lookout/commits{/sha}","git_commits_url":"https://api.github.com/repos/src-d/lookout/git/commits{/sha}","comments_url":"https://api.github.com/repos/src-d/lookout/comments{/number}","issue_comment_url":"https://api.github.com/repos/src-d/lookout/issues/comments{/number}","contents_url":"https://api.github.com/repos/src-d/lookout/contents/{+path}","compare_url":"https://api.github.com/repos/src-d/lookout/compare/{base}...{head}","merges_url":"https://api.github.com/repos/src-d/lookout/merges","archive_url":"https://api.github.com/repos/src-d/lookout/{archive_format}{/ref}","downloads_url":"https://api.github.com/repos/src-d/lookout/downloads","issues_url":"https://api.github.com/repos/src-d/lookout/issues{/number}","pulls_url":"https://api.github.com/repos/src-d/lookout/pulls{/number}","milestones_url":"https://api.github.com/repos/src-d/lookout/milestones{/number}","notifications_url":"https://api.github.com/repos/src-d/lookout/notifications{?since,all,participating}","labels_url":"https://api.github.com/repos/src-d/lookout/labels{/name}","releases_url":"https://api.github.com/repos/src-d/lookout/releases{/id}","deployments_url":"https://api.github.com/repos/src-d/lookout/deployments","created_at":"2018-06-05T08:37:23Z","updated_at":"2025-10-05T17:39:33Z","pushed_at":"2021-08-03T19:18:36Z","git_url":"git://github.com/src-d/lookout.git","ssh_url":"git@github.com:src-d/lookout.git","clone_url":"https://github.com/src-d/lookout.git","svn_url":"https://github.com/src-d/lookout","homepage":"https://docs.sourced.tech/lookout","size":60130,"stargazers_count":152,"watchers_count":152,"language":"Go","has_issues":true,"has_projects":false,"has_downloads":true,"has_wiki":false,"has_pages":false,"has_discussions":false,"forks_count":33,"mirror_url":null,"archived":false,"disabled":false,"open_issues_count":84,"license":{"key":"agpl-3.0","name":"GNU Affero General Public License v3.0","spdx_id":"AGPL-3.0","url":"https://api.github.com/licenses/agpl-3.0","node_id":"MDc6TGljZW5zZTE="},"allow_forking":true,"is_template":false,"web_commit_signoff_required":false,"has_pull_requests":true,"pull_request_creation_policy":"all","topics":["code-review","github","lookout"],"visibility":"public","forks":33,"open_issues":84,"watchers":152,"default_branch":"master"}},"_links":{"self":{"href":"https://api.github.com/repos/src-d/lookout/pulls/764"},"html":{"href":"https://github.com/src-d/lookout/pull/764"},"issue":{"href":"https://api.github.com/repos/src-d/lookout/issues/764"},"comments":{"href":"https://api.github.com/repos/src-d/lookout/issues/764/comments"},"review_comments":{"href":"https://api.github.com/repos/src-d/lookout/pulls/764/comments"},"review_comment":{"href":"https://api.github.com/repos/src-d/lookout/pulls/comments{/number}"},"commits":{"href":"https://api.github.com/repos/src-d/lookout/pulls/764/commits"},"statuses":{"href":"https://api.github.com/repos/src-d/lookout/statuses/91747cde42d99a78d3ce674f54713528d57c600c"}},"author_association":"NONE","auto_merge":null,"assignee":null,"active_lock_reason":null},{"url":"https://api.github.com/repos/src-d/lookout/pulls/760","id":428557635,"node_id":"MDExOlB1bGxSZXF1ZXN0NDI4NTU3NjM1","html_url":"https://github.com/src-d/lookout/pull/760","diff_url":"https://github.com/src-d/lookout/pull/760.diff","patch_url":"https://github.com/src-d/lookout/pull/760.patch","issue_url":"https://api.github.com/repos/src-d/lookout/issues/760","number":760,"state":"open","locked":false,"title":"[Security] Bump websocket-extensions from 0.1.3 to 0.1.4 in /frontend","user":{"login":"dependabot-preview[bot]","id":27856297,"node_id":"MDM6Qm90Mjc4NTYyOTc=","avatar_url":"https://avatars.githubusercontent.com/in/2141?v=4","gravatar_id":"","url":"https://api.github.com/users/dependabot-preview%5Bbot%5D","html_url":"https://github.com/apps/dependabot-preview","followers_url":"https://api.github.com/users/dependabot-preview%5Bbot%5D/followers","following_url":"https://api.github.com/users/dependabot-preview%5Bbot%5D/following{/other_user}","gists_url":"https://api.github.com/users/dependabot-preview%5Bbot%5D/gists{/gist_id}","starred_url":"https://api.github.com/users/dependabot-preview%5Bbot%5D/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/dependabot-preview%5Bbot%5D/subscriptions","organizations_url":"https://api.github.com/users/dependabot-preview%5Bbot%5D/orgs","repos_url":"https://api.github.com/users/dependabot-preview%5Bbot%5D/repos","events_url":"https://api.github.com/users/dependabot-preview%5Bbot%5D/events{/privacy}","received_events_url":"https://api.github.com/users/dependabot-preview%5Bbot%5D/received_events","type":"Bot","user_view_type":"public","site_admin":false},"body":"Bumps [websocket-extensions](https://github.com/faye/websocket-extensions-node) from 0.1.3 to 0.1.4. **This update includes a security fix.**\n<details>\n<summary>Vulnerabilities fixed</summary>\n<p><em>Sourced from <a href=\"https://github.com/advisories/GHSA-g78m-2chm-r7qv\">The GitHub Security Advisory Database</a>.</em></p>\n<blockquote>\n<p><strong>Regular Expression Denial of Service in websocket-extensions (NPM package)</strong></p>\n<h3>Impact</h3>\n<p>The ReDoS flaw allows an attacker to exhaust the server's capacity to process\nincoming requests by sending a WebSocket handshake request containing a header\nof the following form:</p>\n<pre><code>Sec-WebSocket-Extensions: a; b=&quot;\\c\\c\\c\\c\\c\\c\\c\\c\\c\\c ...\n</code></pre>\n<p>That is, a header containing an unclosed string parameter value whose content is\na repeating two-byte sequence of a backslash and some other character. The\nparser takes exponential time to reject this header as invalid, and this will\nblock the processing of any other work on the same thread. Thus if you are\nrunning a single-threaded server, such a request can render your service\ncompletely unavailable.</p>\n<h3>Patches</h3>\n<p>Users should upgrade to version 0.1.4.</p>\n<h3>Workarounds</h3>\n</tr></table> ... (truncated)\n<p>Affected versions: &lt; 0.1.4</p>\n</blockquote>\n</details>\n<details>\n<summary>Changelog</summary>\n<p><em>Sourced from <a href=\"https://github.com/faye/websocket-extensions-node/blob/master/CHANGELOG.md\">websocket-extensions's changelog</a>.</em></p>\n<blockquote>\n<h3>0.1.4 / 2020-06-02</h3>\n<ul>\n<li>Remove a ReDoS vulnerability in the header parser (CVE-2020-7662, reported by\nRobert McLaughlin)</li>\n<li>Change license from MIT to Apache 2.0</li>\n</ul>\n</blockquote>\n</details>\n<details>\n<summary>Commits</summary>\n<ul>\n<li><a href=\"https://github.com/faye/websocket-extensions-node/commit/8efd0cd6e35faf9bb9cb08759be1e27082177d43\"><code>8efd0cd</code></a> Bump version to 0.1.4</li>\n<li><a href=\"https://github.com/faye/websocket-extensions-node/commit/3dad4ad44a8c5f74d4f8f4efd3f9d6e0b5df3051\"><code>3dad4ad</code></a> Remove ReDoS vulnerability in the Sec-WebSocket-Extensions header parser</li>\n<li><a href=\"https://github.com/faye/websocket-extensions-node/commit/4a76c75efb1c5d6a2f60550e9501757458d19533\"><code>4a76c75</code></a> Add Node versions 13 and 14 on Travis</li>\n<li><a href=\"https://github.com/faye/websocket-extensions-node/commit/44a677a9c0631daed0b0f4a4b68c095b624183b8\"><code>44a677a</code></a> Formatting change: {...} should have spaces inside the braces</li>\n<li><a href=\"https://github.com/faye/websocket-extensions-node/commit/f6c50aba0c20ff45b0f87cea33babec1217ec3f5\"><code>f6c50ab</code></a> Let npm reformat package.json</li>\n<li><a href=\"https://github.com/faye/websocket-extensions-node/commit/2d211f3705d52d9efb4f01daf5a253adf828592e\"><code>2d211f3</code></a> Change markdown formatting of docs.</li>\n<li><a href=\"https://github.com/faye/websocket-extensions-node/commit/0b620834cc1e1f2eace1d55ab17f71d90d88271d\"><code>0b62083</code></a> Update Travis target versions.</li>\n<li><a href=\"https://github.com/faye/websocket-extensions-node/commit/729a4653073fa8dd020561113513bfa2e2119415\"><code>729a465</code></a> Switch license to Apache 2.0.</li>\n<li>See full diff in <a href=\"https://github.com/faye/websocket-extensions-node/compare/0.1.3...0.1.4\">compare view</a></li>\n</ul>\n</details>\n<br />\n\n\n[![Dependabot compatibility score](https://api.dependabot.com/badges/compatibility_score?dependency-name=websocket-extensions&package-manager=npm_and_yarn&previous-version=0.1.3&new-version=0.1.4)](https://dependabot.com/compatibility-score/?dependency-name=websocket-extensions&package-manager=npm_and_yarn&previous-version=0.1.3&new-version=0.1.4)\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n<details>\n<summary>Dependabot commands and options</summary>\n<br />\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot merge` will merge this PR after your CI passes on it\n- `@dependabot squash and merge` will squash and merge this PR after your CI passes on it\n- `@dependabot cancel merge` will cancel a previously requested merge and block automerging\n- `@dependabot reopen` will reopen this PR if it is closed\n- `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually\n- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot use these labels` will set the current labels as the default for future PRs for this repo and language\n- `@dependabot use these reviewers` will set the current reviewers as the default for future PRs for this repo and language\n- `@dependabot use these assignees` will set the current assignees as the default for future PRs for this repo and language\n- `@dependabot use this milestone` will set the current milestone as the default for future PRs for this repo and language\n- `@dependabot badge me` will comment on this PR with code to add a \"Dependabot enabled\" badge to your readme\n\nAdditionally, you can set the following in your Dependabot [dashboard](https://app.dependabot.com):\n- Update frequency (including time of day and day of week)\n- Pull request limits (per update run and/or open at any time)\n- Automerge options (never/patch/minor, and dev/runtime dependencies)\n- Out-of-range updates (receive only lockfile updates, if desired)\n- Security updates (receive only security updates, if desired)\n\n\n\n</details>","created_at":"2020-06-05T16:19:25Z","updated_at":"2020-06-05T16:19:26Z","closed_at":null,"merged_at":null,"merge_commit_sha":"a68b4577d18f4fef06797d479512ccadce19a526","assignees":[],"requested_reviewers":[],"requested_teams":[],"labels":[{"id":1224325914,"node_id":"MDU6TGFiZWwxMjI0MzI1OTE0","url":"https://api.github.com/repos/src-d/lookout/labels/dependencies","name":"dependencies","color":"0025ff","default":false,"description":"Pull requests that update a dependency file"},{"id":1225416698,"node_id":"MDU6TGFiZWwxMjI1NDE2Njk4","url":"https://api.github.com/repos/src-d/lookout/labels/javascript","name":"javascript","color":"168700","default":false,"description":"Pull requests that update Javascript code"},{"id":1445656551,"node_id":"MDU6TGFiZWwxNDQ1NjU2NTUx","url":"https://api.github.com/repos/src-d/lookout/labels/security","name":"security","color":"ee0701","default":false,"description":"Pull requests that address a security vulnerability"}],"milestone":null,"draft":false,"commits_url":"https://api.github.com/repos/src-d/lookout/pulls/760/commits","review_comments_url":"https://api.github.com/repos/src-d/lookout/pulls/760/comments","review_comment_url":"https://api.github.com/repos/src-d/lookout/pulls/comments{/number}","comments_url":"https://api.github.com/repos/src-d/lookout/issues/760/comments","statuses_url":"https://api.github.com/repos/src-d/lookout/statuses/823cdc027f721008254d94c598d675e7b8dbad04","head":{"label":"src-d:dependabot/npm_and_yarn/frontend/websocket-extensions-0.1.4","ref":"dependabot/npm_and_yarn/frontend/websocket-extensions-0.1.4","sha":"823cdc027f721008254d94c598d675e7b8dbad04","user":{"login":"src-d","id":15128793,"node_id":"MDEyOk9yZ2FuaXphdGlvbjE1MTI4Nzkz","avatar_url":"https://avatars.githubusercontent.com/u/15128793?v=4","gravatar_id":"","url":"https://api.github.com/users/src-d","html_url":"https://github.com/src-d","followers_url":"https://api.github.com/users/src-d/followers","following_url":"https://api.github.com/users/src-d/following{/other_user}","gists_url":"https://api.github.com/users/src-d/gists{/gist_id}","starred_url":"https://api.github.com/users/src-d/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/src-d/subscriptions","organizations_url":"https://api.github.com/users/src-d/orgs","repos_url":"https://api.github.com/users/src-d/repos","events_url":"https://api.github.com/users/src-d/events{/privacy}","received_events_url":"https://api.github.com/users/src-d/received_events","type":"Organization","user_view_type":"public","site_admin":false},"repo":{"id":136146572,"node_id":"MDEwOlJlcG9zaXRvcnkxMzYxNDY1NzI=","name":"lookout","full_name":"src-d/lookout","private":false,"owner":{"login":"src-d","id":15128793,"node_id":"MDEyOk9yZ2FuaXphdGlvbjE1MTI4Nzkz","avatar_url":"https://avatars.githubusercontent.com/u/15128793?v=4","gravatar_id":"","url":"https://api.github.com/users/src-d","html_url":"https://github.com/src-d","followers_url":"https://api.github.com/users/src-d/followers","following_url":"https://api.github.com/users/src-d/following{/other_user}","gists_url":"https://api.github.com/users/src-d/gists{/gist_id}","starred_url":"https://api.github.com/users/src-d/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/src-d/subscriptions","organizations_url":"https://api.github.com/users/src-d/orgs","repos_url":"https://api.github.com/users/src-d/repos","events_url":"https://api.github.com/users/src-d/events{/privacy}","received_events_url":"https://api.github.com/users/src-d/received_events","type":"Organization","user_view_type":"public","site_admin":false},"html_url":"https://github.com/src-d/lookout","description":"Assisted code review, running custom code analyzers on pull requests","fork":false,"url":"https://api.github.com/repos/src-d/lookout","forks_url":"https://api.github.com/repos/src-d/lookout/forks","keys_url":"https://api.github.com/repos/src-d/lookout/keys{/key_id}","collaborators_url":"https://api.github.com/repos/src-d/lookout/collaborators{/collaborator}","teams_url":"https://api.github.com/repos/src-d/lookout/teams","hooks_url":"https://api.github.com/repos/src-d/lookout/hooks","issue_events_url":"https://api.github.com/repos/src-d/lookout/issues/events{/number}","events_url":"https://api.github.com/repos/src-d/lookout/events","assignees_url":"https://api.github.com/repos/src-d/lookout/assignees{/user}","branches_url":"https://api.github.com/repos/src-d/lookout/branches{/branch}","tags_url":"https://api.github.com/repos/src-d/lookout/tags","blobs_url":"https://api.github.com/repos/src-d/lookout/git/blobs{/sha}","git_tags_url":"https://api.github.com/repos/src-d/lookout/git/tags{/sha}","git_refs_url":"https://api.github.com/repos/src-d/lookout/git/refs{/sha}","trees_url":"https://api.github.com/repos/src-d/lookout/git/trees{/sha}","statuses_url":"https://api.github.com/repos/src-d/lookout/statuses/{sha}","languages_url":"https://api.github.com/repos/src-d/lookout/languages","stargazers_url":"https://api.github.com/repos/src-d/lookout/stargazers","contributors_url":"https://api.github.com/repos/src-d/lookout/contributors","subscribers_url":"https://api.github.com/repos/src-d/lookout/subscribers","subscription_url":"https://api.github.com/repos/src-d/lookout/subscription","commits_url":"https://api.github.com/repos/src-d/lookout/commits{/sha}","git_commits_url":"https://api.github.com/repos/src-d/lookout/git/commits{/sha}","comments_url":"https://api.github.com/repos/src-d/lookout/comments{/number}","issue_comment_url":"https://api.github.com/repos/src-d/lookout/issues/comments{/number}","contents_url":"https://api.github.com/repos/src-d/lookout/contents/{+path}","compare_url":"https://api.github.com/repos/src-d/lookout/compare/{base}...{head}","merges_url":"https://api.github.com/repos/src-d/lookout/merges","archive_url":"https://api.github.com/repos/src-d/lookout/{archive_format}{/ref}","downloads_url":"https://api.github.com/repos/src-d/lookout/downloads","issues_url":"https://api.github.com/repos/src-d/lookout/issues{/number}","pulls_url":"https://api.github.com/repos/src-d/lookout/pulls{/number}","milestones_url":"https://api.github.com/repos/src-d/lookout/milestones{/number}","notifications_url":"https://api.github.com/repos/src-d/lookout/notifications{?since,all,participating}","labels_url":"https://api.github.com/repos/src-d/lookout/labels{/name}","releases_url":"https://api.github.com/repos/src-d/lookout/releases{/id}","deployments_url":"https://api.github.com/repos/src-d/lookout/deployments","created_at":"2018-06-05T08:37:23Z","updated_at":"2025-10-05T17:39:33Z","pushed_at":"2021-08-03T19:18:36Z","git_url":"git://github.com/src-d/lookout.git","ssh_url":"git@github.com:src-d/lookout.git","clone_url":"https://github.com/src-d/lookout.git","svn_url":"https://github.com/src-d/lookout","homepage":"https://docs.sourced.tech/lookout","size":60130,"stargazers_count":152,"watchers_count":152,"language":"Go","has_issues":true,"has_projects":false,"has_downloads":true,"has_wiki":false,"has_pages":false,"has_discussions":false,"forks_count":33,"mirror_url":null,"archived":false,"disabled":false,"open_issues_count":84,"license":{"key":"agpl-3.0","name":"GNU Affero General Public License v3.0","spdx_id":"AGPL-3.0","url":"https://api.github.com/licenses/agpl-3.0","node_id":"MDc6TGljZW5zZTE="},"allow_forking":true,"is_template":false,"web_commit_signoff_required":false,"has_pull_requests":true,"pull_request_creation_policy":"all","topics":["code-review","github","lookout"],"visibility":"public","forks":33,"open_issues":84,"watchers":152,"default_branch":"master"}},"base":{"label":"src-d:master","ref":"master","sha":"d5cccd9aed531327965c374533f42e0469af4cda","user":{"login":"src-d","id":15128793,"node_id":"MDEyOk9yZ2FuaXphdGlvbjE1MTI4Nzkz","avatar_url":"https://avatars.githubusercontent.com/u/15128793?v=4","gravatar_id":"","url":"https://api.github.com/users/src-d","html_url":"https://github.com/src-d","followers_url":"https://api.github.com/users/src-d/followers","following_url":"https://api.github.com/users/src-d/following{/other_user}","gists_url":"https://api.github.com/users/src-d/gists{/gist_id}","starred_url":"https://api.github.com/users/src-d/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/src-d/subscriptions","organizations_url":"https://api.github.com/users/src-d/orgs","repos_url":"https://api.github.com/users/src-d/repos","events_url":"https://api.github.com/users/src-d/events{/privacy}","received_events_url":"https://api.github.com/users/src-d/received_events","type":"Organization","user_view_type":"public","site_admin":false},"repo":{"id":136146572,"node_id":"MDEwOlJlcG9zaXRvcnkxMzYxNDY1NzI=","name":"lookout","full_name":"src-d/lookout","private":false,"owner":{"login":"src-d","id":15128793,"node_id":"MDEyOk9yZ2FuaXphdGlvbjE1MTI4Nzkz","avatar_url":"https://avatars.githubusercontent.com/u/15128793?v=4","gravatar_id":"","url":"https://api.github.com/users/src-d","html_url":"https://github.com/src-d","followers_url":"https://api.github.com/users/src-d/followers","following_url":"https://api.github.com/users/src-d/following{/other_user}","gists_url":"https://api.github.com/users/src-d/gists{/gist_id}","starred_url":"https://api.github.com/users/src-d/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/src-d/subscriptions","organizations_url":"https://api.github.com/users/src-d/orgs","repos_url":"https://api.github.com/users/src-d/repos","events_url":"https://api.github.com/users/src-d/events{/privacy}","received_events_url":"https://api.github.com/users/src-d/received_events","type":"Organization","user_view_type":"public","site_admin":false},"html_url":"https://github.com/src-d/lookout","description":"Assisted code review, running custom code analyzers on pull requests","fork":false,"url":"https://api.github.com/repos/src-d/lookout","forks_url":"https://api.github.com/repos/src-d/lookout/forks","keys_url":"https://api.github.com/repos/src-d/lookout/keys{/key_id}","collaborators_url":"https://api.github.com/repos/src-d/lookout/collaborators{/collaborator}","teams_url":"https://api.github.com/repos/src-d/lookout/teams","hooks_url":"https://api.github.com/repos/src-d/lookout/hooks","issue_events_url":"https://api.github.com/repos/src-d/lookout/issues/events{/number}","events_url":"https://api.github.com/repos/src-d/lookout/events","assignees_url":"https://api.github.com/repos/src-d/lookout/assignees{/user}","branches_url":"https://api.github.com/repos/src-d/lookout/branches{/branch}","tags_url":"https://api.github.com/repos/src-d/lookout/tags","blobs_url":"https://api.github.com/repos/src-d/lookout/git/blobs{/sha}","git_tags_url":"https://api.github.com/repos/src-d/lookout/git/tags{/sha}","git_refs_url":"https://api.github.com/repos/src-d/lookout/git/refs{/sha}","trees_url":"https://api.github.com/repos/src-d/lookout/git/trees{/sha}","statuses_url":"https://api.github.com/repos/src-d/lookout/statuses/{sha}","languages_url":"https://api.github.com/repos/src-d/lookout/languages","stargazers_url":"https://api.github.com/repos/src-d/lookout/stargazers","contributors_url":"https://api.github.com/repos/src-d/lookout/contributors","subscribers_url":"https://api.github.com/repos/src-d/lookout/subscribers","subscription_url":"https://api.github.com/repos/src-d/lookout/subscription","commits_url":"https://api.github.com/repos/src-d/lookout/commits{/sha}","git_commits_url":"https://api.github.com/repos/src-d/lookout/git/commits{/sha}","comments_url":"https://api.github.com/repos/src-d/lookout/comments{/number}","issue_comment_url":"https://api.github.com/repos/src-d/lookout/issues/comments{/number}","contents_url":"https://api.github.com/repos/src-d/lookout/contents/{+path}","compare_url":"https://api.github.com/repos/src-d/lookout/compare/{base}...{head}","merges_url":"https://api.github.com/repos/src-d/lookout/merges","archive_url":"https://api.github.com/repos/src-d/lookout/{archive_format}{/ref}","downloads_url":"https://api.github.com/repos/src-d/lookout/downloads","issues_url":"https://api.github.com/repos/src-d/lookout/issues{/number}","pulls_url":"https://api.github.com/repos/src-d/lookout/pulls{/number}","milestones_url":"https://api.github.com/repos/src-d/lookout/milestones{/number}","notifications_url":"https://api.github.com/repos/src-d/lookout/notifications{?since,all,participating}","labels_url":"https://api.github.com/repos/src-d/lookout/labels{/name}","releases_url":"https://api.github.com/repos/src-d/lookout/releases{/id}","deployments_url":"https://api.github.com/repos/src-d/lookout/deployments","created_at":"2018-06-05T08:37:23Z","updated_at":"2025-10-05T17:39:33Z","pushed_at":"2021-08-03T19:18:36Z","git_url":"git://github.com/src-d/lookout.git","ssh_url":"git@github.com:src-d/lookout.git","clone_url":"https://github.com/src-d/lookout.git","svn_url":"https://github.com/src-d/lookout","homepage":"https://docs.sourced.tech/lookout","size":60130,"stargazers_count":152,"watchers_count":152,"language":"Go","has_issues":true,"has_projects":false,"has_downloads":true,"has_wiki":false,"has_pages":false,"has_discussions":false,"forks_count":33,"mirror_url":null,"archived":false,"disabled":false,"open_issues_count":84,"license":{"key":"agpl-3.0","name":"GNU Affero General Public License v3.0","spdx_id":"AGPL-3.0","url":"https://api.github.com/licenses/agpl-3.0","node_id":"MDc6TGljZW5zZTE="},"allow_forking":true,"is_template":false,"web_commit_signoff_required":false,"has_pull_requests":true,"pull_request_creation_policy":"all","topics":["code-review","github","lookout"],"visibility":"public","forks":33,"open_issues":84,"watchers":152,"default_branch":"master"}},"_links":{"self":{"href":"https://api.github.com/repos/src-d/lookout/pulls/760"},"html":{"href":"https://github.com/src-d/lookout/pull/760"},"issue":{"href":"https://api.github.com/repos/src-d/lookout/issues/760"},"comments":{"href":"https://api.github.com/repos/src-d/lookout/issues/760/comments"},"review_comments":{"href":"https://api.github.com/repos/src-d/lookout/pulls/760/comments"},"review_comment":{"href":"https://api.github.com/repos/src-d/lookout/pulls/comments{/number}"},"commits":{"href":"https://api.github.com/repos/src-d/lookout/pulls/760/commits"},"statuses":{"href":"https://api.github.com/repos/src-d/lookout/statuses/823cdc027f721008254d94c598d675e7b8dbad04"}},"author_association":"NONE","auto_merge":null,"assignee":null,"active_lock_reason":null},{"url":"https://api.github.com/repos/src-d/lookout/pulls/756","id":425769431,"node_id":"MDExOlB1bGxSZXF1ZXN0NDI1NzY5NDMx","html_url":"https://github.com/src-d/lookout/pull/756","diff_url":"https://github.com/src-d/lookout/pull/756.diff","patch_url":"https://github.com/src-d/lookout/pull/756.patch","issue_url":"https://api.github.com/repos/src-d/lookout/issues/756","number":756,"state":"open","locked":false,"title":"Bump react-router-dom from 4.3.1 to 5.2.0 in /frontend","user":{"login":"dependabot-preview[bot]","id":27856297,"node_id":"MDM6Qm90Mjc4NTYyOTc=","avatar_url":"https://avatars.githubusercontent.com/in/2141?v=4","gravatar_id":"","url":"https://api.github.com/users/dependabot-preview%5Bbot%5D","html_url":"https://github.com/apps/dependabot-preview","followers_url":"https://api.github.com/users/dependabot-preview%5Bbot%5D/followers","following_url":"https://api.github.com/users/dependabot-preview%5Bbot%5D/following{/other_user}","gists_url":"https://api.github.com/users/dependabot-preview%5Bbot%5D/gists{/gist_id}","starred_url":"https://api.github.com/users/dependabot-preview%5Bbot%5D/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/dependabot-preview%5Bbot%5D/subscriptions","organizations_url":"https://api.github.com/users/dependabot-preview%5Bbot%5D/orgs","repos_url":"https://api.github.com/users/dependabot-preview%5Bbot%5D/repos","events_url":"https://api.github.com/users/dependabot-preview%5Bbot%5D/events{/privacy}","received_events_url":"https://api.github.com/users/dependabot-preview%5Bbot%5D/received_events","type":"Bot","user_view_type":"public","site_admin":false},"body":"Bumps [react-router-dom](https://github.com/ReactTraining/react-router) from 4.3.1 to 5.2.0.\n<details>\n<summary>Release notes</summary>\n<p><em>Sourced from <a href=\"https://github.com/ReactTraining/react-router/releases\">react-router-dom's releases</a>.</em></p>\n<blockquote>\n<h2>v5.2.0</h2>\n<p>This release includes a notable performance boost by separating the &quot;Router&quot; context from the &quot;History&quot; context internally. We also allow every element type for <code>Link</code>'s <code>component</code> prop and support a <code>sensitive</code> prop on NavLink for control over case sensitive matching.</p>\n<p>Enjoy!</p>\n<h2><a href=\"https://github.com/ReactTraining/react-router/compare/v5.1.2...v5.2.0\">Changes</a></h2>\n<ul>\n<li>Add <code>sensitive</code> prop on NavLink (<a href=\"https://github-redirect.dependabot.com/ReactTraining/react-router/issues/7251\">#7251</a> by <a href=\"https://github.com/caseywebdev\">@caseywebdev</a>)</li>\n<li>Fix Link <code>component</code> prop type check (<a href=\"https://github-redirect.dependabot.com/ReactTraining/react-router/issues/7276\">#7276</a> by <a href=\"https://github.com/ypyakymiv\">@ypyakymiv</a>)</li>\n<li>Update <code>mini-create-react-context</code> (<a href=\"https://github-redirect.dependabot.com/ReactTraining/react-router/issues/7288\">#7288</a> by <a href=\"https://github.com/patricksmms\">@patricksmms</a>)</li>\n<li>Separate <code>history</code> to its own context (<a href=\"https://github-redirect.dependabot.com/ReactTraining/react-router/issues/7103\">#7103</a> by <a href=\"https://github.com/illuminist\">@illuminist</a>)</li>\n</ul>\n<h2>v5.1.2</h2>\n<h3><a href=\"https://github.com/ReactTraining/react-router/compare/v5.1.1...v5.1.2\">List of commits</a></h3>\n<h3>Bugfixes</h3>\n<ul>\n<li>Fix lingering <code>&lt;Link ref&gt;</code> error on React 15 (<a href=\"https://github-redirect.dependabot.com/ReactTraining/react-router/issues/6954\">#6954</a>)</li>\n</ul>\n<h2>v5.1.1</h2>\n<h3><a href=\"https://github.com/ReactTraining/react-router/compare/v5.1.0...v5.1.1\">List of commits</a></h3>\n<h3>Bugfixes</h3>\n<ul>\n<li>Fix issue with useParams reading from null object (<a href=\"https://github-redirect.dependabot.com/ReactTraining/react-router/issues/6940\">#6940</a>)</li>\n<li>Fix regression passing ref to functional components in React &lt;= 16.2 (<a href=\"https://github-redirect.dependabot.com/ReactTraining/react-router/issues/6934\">#6934</a>)</li>\n<li>Fix regression passing empty string to matchPath (<a href=\"https://github-redirect.dependabot.com/ReactTraining/react-router/issues/6941\">#6941</a>)</li>\n</ul>\n<h2>v5.1.0</h2>\n<h3><a href=\"https://reacttraining.com/blog/react-router-v5-1/\">Read the blog post</a></h3>\n<h3><a href=\"https://github.com/ReactTraining/react-router/compare/v5.0.1...v5.1.0\">List of commits</a></h3>\n<h3>Features</h3>\n<ul>\n<li>Add <code>useParams</code>, <code>useLocation</code>, <code>useHistory</code>, and <code>useRouteMatch</code> hooks (d6224d6a)</li>\n<li>Add support for <code>forwardRef</code> in <code>&lt;Link&gt;</code> (b5528ed6)</li>\n<li>Add support for functions in <code>&lt;Link to&gt;</code> and <code>&lt;NavLink to&gt;</code> (<a href=\"https://github-redirect.dependabot.com/ReactTraining/react-router/issues/5331\">#5331</a>, <a href=\"https://github-redirect.dependabot.com/ReactTraining/react-router/issues/5368\">#5368</a>)</li>\n<li>Add <code>&lt;Link component&gt;</code> API (<a href=\"https://github-redirect.dependabot.com/ReactTraining/react-router/issues/5437\">#5437</a>)</li>\n</ul>\n<h3>Bugfixes</h3>\n<ul>\n<li>Don't render <code>&lt;Route children&gt;</code> elements when the <code>&lt;Route&gt;</code> does not match (96656595)</li>\n</ul>\n<h2>v5.0.1</h2>\n<h3><a href=\"https://github.com/ReactTraining/react-router/compare/v5.0.0...v5.0.1\">Changes</a></h3>\n<h3>Updates</h3>\n<ul>\n<li>Reduced component depth in withRouter() HOC. (10d78bb)</li>\n</ul>\n</tr></table> ... (truncated)\n</blockquote>\n</details>\n<details>\n<summary>Commits</summary>\n<ul>\n<li><a href=\"https://github.com/ReactTraining/react-router/commit/21a62e55c0d6196002bd4ab5b3350514976928cf\"><code>21a62e5</code></a> v5.2.0</li>\n<li><a href=\"https://github.com/ReactTraining/react-router/commit/742f035281c48a00ee29f375b123d76e5cec94e2\"><code>742f035</code></a> Revert &quot;chore: Replace deprecated &quot;componentWillMount&quot; with &quot;componentDidMoun...</li>\n<li><a href=\"https://github.com/ReactTraining/react-router/commit/7d64842cea4cfe40bc1c37c131ebd5671ef3c070\"><code>7d64842</code></a> Revert &quot;perf: Use PureComponent to avoid useless re-renders (<a href=\"https://github-redirect.dependabot.com/ReactTraining/react-router/issues/7258\">#7258</a>)&quot; (<a href=\"https://github-redirect.dependabot.com/ReactTraining/react-router/issues/7328\">#7328</a>)</li>\n<li><a href=\"https://github.com/ReactTraining/react-router/commit/fc53733017820306d8a6ccfad6a00a75f4ab1de1\"><code>fc53733</code></a> Separate history object to its own context (<a href=\"https://github-redirect.dependabot.com/ReactTraining/react-router/issues/7103\">#7103</a>)</li>\n<li><a href=\"https://github.com/ReactTraining/react-router/commit/973cf52eb259b3b14aa5475a2ddf64886ea0655e\"><code>973cf52</code></a> chore(package): update mini-create-react-context to v0.4.0 (<a href=\"https://github-redirect.dependabot.com/ReactTraining/react-router/issues/7288\">#7288</a>)</li>\n<li><a href=\"https://github.com/ReactTraining/react-router/commit/ce6f59c94d0850127d846ba00357745bf261d2d2\"><code>ce6f59c</code></a> missing tag (<a href=\"https://github-redirect.dependabot.com/ReactTraining/react-router/issues/7284\">#7284</a>)</li>\n<li><a href=\"https://github.com/ReactTraining/react-router/commit/65bbc09230c60530458068e03aaa42ef95ae6a29\"><code>65bbc09</code></a> Clearly describe API of callback in code (<a href=\"https://github-redirect.dependabot.com/ReactTraining/react-router/issues/7279\">#7279</a>)</li>\n<li><a href=\"https://github.com/ReactTraining/react-router/commit/e6327471ef53c003aeec7f3e2189fd85e93aa0cb\"><code>e632747</code></a> Fixed Link component prop type check (<a href=\"https://github-redirect.dependabot.com/ReactTraining/react-router/issues/7276\">#7276</a>)</li>\n<li><a href=\"https://github.com/ReactTraining/react-router/commit/8439fdd0e5650652541a596e310fdae4f4f201c5\"><code>8439fdd</code></a> update the docs for browserrouter in the example of basename. (<a href=\"https://github-redirect.dependabot.com/ReactTraining/react-router/issues/7277\">#7277</a>)</li>\n<li><a href=\"https://github.com/ReactTraining/react-router/commit/26aa871f2bdf7387f52677561f4b2b1b2a0336f8\"><code>26aa871</code></a> Fixes <a href=\"https://github-redirect.dependabot.com/ReactTraining/react-router/issues/7272\">#7272</a> (<a href=\"https://github-redirect.dependabot.com/ReactTraining/react-router/issues/7274\">#7274</a>)</li>\n<li>Additional commits viewable in <a href=\"https://github.com/ReactTraining/react-router/compare/v4.3.1...v5.2.0\">compare view</a></li>\n</ul>\n</details>\n<br />\n\n\n[![Dependabot compatibility score](https://api.dependabot.com/badges/compatibility_score?dependency-name=react-router-dom&package-manager=npm_and_yarn&previous-version=4.3.1&new-version=5.2.0)](https://dependabot.com/compatibility-score/?dependency-name=react-router-dom&package-manager=npm_and_yarn&previous-version=4.3.1&new-version=5.2.0)\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n<details>\n<summary>Dependabot commands and options</summary>\n<br />\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot merge` will merge this PR after your CI passes on it\n- `@dependabot squash and merge` will squash and merge this PR after your CI passes on it\n- `@dependabot cancel merge` will cancel a previously requested merge and block automerging\n- `@dependabot reopen` will reopen this PR if it is closed\n- `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually\n- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot use these labels` will set the current labels as the default for future PRs for this repo and language\n- `@dependabot use these reviewers` will set the current reviewers as the default for future PRs for this repo and language\n- `@dependabot use these assignees` will set the current assignees as the default for future PRs for this repo and language\n- `@dependabot use this milestone` will set the current milestone as the default for future PRs for this repo and language\n- `@dependabot badge me` will comment on this PR with code to add a \"Dependabot enabled\" badge to your readme\n\nAdditionally, you can set the following in your Dependabot [dashboard](https://app.dependabot.com):\n- Update frequency (including time of day and day of week)\n- Pull request limits (per update run and/or open at any time)\n- Automerge options (never/patch/minor, and dev/runtime dependencies)\n- Out-of-range updates (receive only lockfile updates, if desired)\n- Security updates (receive only security updates, if desired)\n\n\n\n</details>","created_at":"2020-06-01T05:51:22Z","updated_at":"2020-06-01T05:51:24Z","closed_at":null,"merged_at":null,"merge_commit_sha":"5fc83be6c058e8387ac2b395fdd730f410480b4f","assignees":[],"requested_reviewers":[],"requested_teams":[],"labels":[{"id":1224325914,"node_id":"MDU6TGFiZWwxMjI0MzI1OTE0","url":"https://api.github.com/repos/src-d/lookout/labels/dependencies","name":"dependencies","color":"0025ff","default":false,"description":"Pull requests that update a dependency file"},{"id":1225416698,"node_id":"MDU6TGFiZWwxMjI1NDE2Njk4","url":"https://api.github.com/repos/src-d/lookout/labels/javascript","name":"javascript","color":"168700","default":false,"description":"Pull requests that update Javascript code"}],"milestone":null,"draft":false,"commits_url":"https://api.github.com/repos/src-d/lookout/pulls/756/commits","review_comments_url":"https://api.github.com/repos/src-d/lookout/pulls/756/comments","review_comment_url":"https://api.github.com/repos/src-d/lookout/pulls/comments{/number}","comments_url":"https://api.github.com/repos/src-d/lookout/issues/756/comments","statuses_url":"https://api.github.com/repos/src-d/lookout/statuses/baebf8a07c92ea49585b0ec4e0fe5c6e2d7662ce","head":{"label":"src-d:dependabot/npm_and_yarn/frontend/react-router-dom-5.2.0","ref":"dependabot/npm_and_yarn/frontend/react-router-dom-5.2.0","sha":"baebf8a07c92ea49585b0ec4e0fe5c6e2d7662ce","user":{"login":"src-d","id":15128793,"node_id":"MDEyOk9yZ2FuaXphdGlvbjE1MTI4Nzkz","avatar_url":"https://avatars.githubusercontent.com/u/15128793?v=4","gravatar_id":"","url":"https://api.github.com/users/src-d","html_url":"https://github.com/src-d","followers_url":"https://api.github.com/users/src-d/followers","following_url":"https://api.github.com/users/src-d/following{/other_user}","gists_url":"https://api.github.com/users/src-d/gists{/gist_id}","starred_url":"https://api.github.com/users/src-d/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/src-d/subscriptions","organizations_url":"https://api.github.com/users/src-d/orgs","repos_url":"https://api.github.com/users/src-d/repos","events_url":"https://api.github.com/users/src-d/events{/privacy}","received_events_url":"https://api.github.com/users/src-d/received_events","type":"Organization","user_view_type":"public","site_admin":false},"repo":{"id":136146572,"node_id":"MDEwOlJlcG9zaXRvcnkxMzYxNDY1NzI=","name":"lookout","full_name":"src-d/lookout","private":false,"owner":{"login":"src-d","id":15128793,"node_id":"MDEyOk9yZ2FuaXphdGlvbjE1MTI4Nzkz","avatar_url":"https://avatars.githubusercontent.com/u/15128793?v=4","gravatar_id":"","url":"https://api.github.com/users/src-d","html_url":"https://github.com/src-d","followers_url":"https://api.github.com/users/src-d/followers","following_url":"https://api.github.com/users/src-d/following{/other_user}","gists_url":"https://api.github.com/users/src-d/gists{/gist_id}","starred_url":"https://api.github.com/users/src-d/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/src-d/subscriptions","organizations_url":"https://api.github.com/users/src-d/orgs","repos_url":"https://api.github.com/users/src-d/repos","events_url":"https://api.github.com/users/src-d/events{/privacy}","received_events_url":"https://api.github.com/users/src-d/received_events","type":"Organization","user_view_type":"public","site_admin":false},"html_url":"https://github.com/src-d/lookout","description":"Assisted code review, running custom code analyzers on pull requests","fork":false,"url":"https://api.github.com/repos/src-d/lookout","forks_url":"https://api.github.com/repos/src-d/lookout/forks","keys_url":"https://api.github.com/repos/src-d/lookout/keys{/key_id}","collaborators_url":"https://api.github.com/repos/src-d/lookout/collaborators{/collaborator}","teams_url":"https://api.github.com/repos/src-d/lookout/teams","hooks_url":"https://api.github.com/repos/src-d/lookout/hooks","issue_events_url":"https://api.github.com/repos/src-d/lookout/issues/events{/number}","events_url":"https://api.github.com/repos/src-d/lookout/events","assignees_url":"https://api.github.com/repos/src-d/lookout/assignees{/user}","branches_url":"https://api.github.com/repos/src-d/lookout/branches{/branch}","tags_url":"https://api.github.com/repos/src-d/lookout/tags","blobs_url":"https://api.github.com/repos/src-d/lookout/git/blobs{/sha}","git_tags_url":"https://api.github.com/repos/src-d/lookout/git/tags{/sha}","git_refs_url":"https://api.github.com/repos/src-d/lookout/git/refs{/sha}","trees_url":"https://api.github.com/repos/src-d/lookout/git/trees{/sha}","statuses_url":"https://api.github.com/repos/src-d/lookout/statuses/{sha}","languages_url":"https://api.github.com/repos/src-d/lookout/languages","stargazers_url":"https://api.github.com/repos/src-d/lookout/stargazers","contributors_url":"https://api.github.com/repos/src-d/lookout/contributors","subscribers_url":"https://api.github.com/repos/src-d/lookout/subscribers","subscription_url":"https://api.github.com/repos/src-d/lookout/subscription","commits_url":"https://api.github.com/repos/src-d/lookout/commits{/sha}","git_commits_url":"https://api.github.com/repos/src-d/lookout/git/commits{/sha}","comments_url":"https://api.github.com/repos/src-d/lookout/comments{/number}","issue_comment_url":"https://api.github.com/repos/src-d/lookout/issues/comments{/number}","contents_url":"https://api.github.com/repos/src-d/lookout/contents/{+path}","compare_url":"https://api.github.com/repos/src-d/lookout/compare/{base}...{head}","merges_url":"https://api.github.com/repos/src-d/lookout/merges","archive_url":"https://api.github.com/repos/src-d/lookout/{archive_format}{/ref}","downloads_url":"https://api.github.com/repos/src-d/lookout/downloads","issues_url":"https://api.github.com/repos/src-d/lookout/issues{/number}","pulls_url":"https://api.github.com/repos/src-d/lookout/pulls{/number}","milestones_url":"https://api.github.com/repos/src-d/lookout/milestones{/number}","notifications_url":"https://api.github.com/repos/src-d/lookout/notifications{?since,all,participating}","labels_url":"https://api.github.com/repos/src-d/lookout/labels{/name}","releases_url":"https://api.github.com/repos/src-d/lookout/releases{/id}","deployments_url":"https://api.github.com/repos/src-d/lookout/deployments","created_at":"2018-06-05T08:37:23Z","updated_at":"2025-10-05T17:39:33Z","pushed_at":"2021-08-03T19:18:36Z","git_url":"git://github.com/src-d/lookout.git","ssh_url":"git@github.com:src-d/lookout.git","clone_url":"https://github.com/src-d/lookout.git","svn_url":"https://github.com/src-d/lookout","homepage":"https://docs.sourced.tech/lookout","size":60130,"stargazers_count":152,"watchers_count":152,"language":"Go","has_issues":true,"has_projects":false,"has_downloads":true,"has_wiki":false,"has_pages":false,"has_discussions":false,"forks_count":33,"mirror_url":null,"archived":false,"disabled":false,"open_issues_count":84,"license":{"key":"agpl-3.0","name":"GNU Affero General Public License v3.0","spdx_id":"AGPL-3.0","url":"https://api.github.com/licenses/agpl-3.0","node_id":"MDc6TGljZW5zZTE="},"allow_forking":true,"is_template":false,"web_commit_signoff_required":false,"has_pull_requests":true,"pull_request_creation_policy":"all","topics":["code-review","github","lookout"],"visibility":"public","forks":33,"open_issues":84,"watchers":152,"default_branch":"master"}},"base":{"label":"src-d:master","ref":"master","sha":"d5cccd9aed531327965c374533f42e0469af4cda","user":{"login":"src-d","id":15128793,"node_id":"MDEyOk9yZ2FuaXphdGlvbjE1MTI4Nzkz","avatar_url":"https://avatars.githubusercontent.com/u/15128793?v=4","gravatar_id":"","url":"https://api.github.com/users/src-d","html_url":"https://github.com/src-d","followers_url":"https://api.github.com/users/src-d/followers","following_url":"https://api.github.com/users/src-d/following{/other_user}","gists_url":"https://api.github.com/users/src-d/gists{/gist_id}","starred_url":"https://api.github.com/users/src-d/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/src-d/subscriptions","organizations_url":"https://api.github.com/users/src-d/orgs","repos_url":"https://api.github.com/users/src-d/repos","events_url":"https://api.github.com/users/src-d/events{/privacy}","received_events_url":"https://api.github.com/users/src-d/received_events","type":"Organization","user_view_type":"public","site_admin":false},"repo":{"id":136146572,"node_id":"MDEwOlJlcG9zaXRvcnkxMzYxNDY1NzI=","name":"lookout","full_name":"src-d/lookout","private":false,"owner":{"login":"src-d","id":15128793,"node_id":"MDEyOk9yZ2FuaXphdGlvbjE1MTI4Nzkz","avatar_url":"https://avatars.githubusercontent.com/u/15128793?v=4","gravatar_id":"","url":"https://api.github.com/users/src-d","html_url":"https://github.com/src-d","followers_url":"https://api.github.com/users/src-d/followers","following_url":"https://api.github.com/users/src-d/following{/other_user}","gists_url":"https://api.github.com/users/src-d/gists{/gist_id}","starred_url":"https://api.github.com/users/src-d/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/src-d/subscriptions","organizations_url":"https://api.github.com/users/src-d/orgs","repos_url":"https://api.github.com/users/src-d/repos","events_url":"https://api.github.com/users/src-d/events{/privacy}","received_events_url":"https://api.github.com/users/src-d/received_events","type":"Organization","user_view_type":"public","site_admin":false},"html_url":"https://github.com/src-d/lookout","description":"Assisted code review, running custom code analyzers on pull requests","fork":false,"url":"https://api.github.com/repos/src-d/lookout","forks_url":"https://api.github.com/repos/src-d/lookout/forks","keys_url":"https://api.github.com/repos/src-d/lookout/keys{/key_id}","collaborators_url":"https://api.github.com/repos/src-d/lookout/collaborators{/collaborator}","teams_url":"https://api.github.com/repos/src-d/lookout/teams","hooks_url":"https://api.github.com/repos/src-d/lookout/hooks","issue_events_url":"https://api.github.com/repos/src-d/lookout/issues/events{/number}","events_url":"https://api.github.com/repos/src-d/lookout/events","assignees_url":"https://api.github.com/repos/src-d/lookout/assignees{/user}","branches_url":"https://api.github.com/repos/src-d/lookout/branches{/branch}","tags_url":"https://api.github.com/repos/src-d/lookout/tags","blobs_url":"https://api.github.com/repos/src-d/lookout/git/blobs{/sha}","git_tags_url":"https://api.github.com/repos/src-d/lookout/git/tags{/sha}","git_refs_url":"https://api.github.com/repos/src-d/lookout/git/refs{/sha}","trees_url":"https://api.github.com/repos/src-d/lookout/git/trees{/sha}","statuses_url":"https://api.github.com/repos/src-d/lookout/statuses/{sha}","languages_url":"https://api.github.com/repos/src-d/lookout/languages","stargazers_url":"https://api.github.com/repos/src-d/lookout/stargazers","contributors_url":"https://api.github.com/repos/src-d/lookout/contributors","subscribers_url":"https://api.github.com/repos/src-d/lookout/subscribers","subscription_url":"https://api.github.com/repos/src-d/lookout/subscription","commits_url":"https://api.github.com/repos/src-d/lookout/commits{/sha}","git_commits_url":"https://api.github.com/repos/src-d/lookout/git/commits{/sha}","comments_url":"https://api.github.com/repos/src-d/lookout/comments{/number}","issue_comment_url":"https://api.github.com/repos/src-d/lookout/issues/comments{/number}","contents_url":"https://api.github.com/repos/src-d/lookout/contents/{+path}","compare_url":"https://api.github.com/repos/src-d/lookout/compare/{base}...{head}","merges_url":"https://api.github.com/repos/src-d/lookout/merges","archive_url":"https://api.github.com/repos/src-d/lookout/{archive_format}{/ref}","downloads_url":"https://api.github.com/repos/src-d/lookout/downloads","issues_url":"https://api.github.com/repos/src-d/lookout/issues{/number}","pulls_url":"https://api.github.com/repos/src-d/lookout/pulls{/number}","milestones_url":"https://api.github.com/repos/src-d/lookout/milestones{/number}","notifications_url":"https://api.github.com/repos/src-d/lookout/notifications{?since,all,participating}","labels_url":"https://api.github.com/repos/src-d/lookout/labels{/name}","releases_url":"https://api.github.com/repos/src-d/lookout/releases{/id}","deployments_url":"https://api.github.com/repos/src-d/lookout/deployments","created_at":"2018-06-05T08:37:23Z","updated_at":"2025-10-05T17:39:33Z","pushed_at":"2021-08-03T19:18:36Z","git_url":"git://github.com/src-d/lookout.git","ssh_url":"git@github.com:src-d/lookout.git","clone_url":"https://github.com/src-d/lookout.git","svn_url":"https://github.com/src-d/lookout","homepage":"https://docs.sourced.tech/lookout","size":60130,"stargazers_count":152,"watchers_count":152,"language":"Go","has_issues":true,"has_projects":false,"has_downloads":true,"has_wiki":false,"has_pages":false,"has_discussions":false,"forks_count":33,"mirror_url":null,"archived":false,"disabled":false,"open_issues_count":84,"license":{"key":"agpl-3.0","name":"GNU Affero General Public License v3.0","spdx_id":"AGPL-3.0","url":"https://api.github.com/licenses/agpl-3.0","node_id":"MDc6TGljZW5zZTE="},"allow_forking":true,"is_template":false,"web_commit_signoff_required":false,"has_pull_requests":true,"pull_request_creation_policy":"all","topics":["code-review","github","lookout"],"visibility":"public","forks":33,"open_issues":84,"watchers":152,"default_branch":"master"}},"_links":{"self":{"href":"https://api.github.com/repos/src-d/lookout/pulls/756"},"html":{"href":"https://github.com/src-d/lookout/pull/756"},"issue":{"href":"https://api.github.com/repos/src-d/lookout/issues/756"},"comments":{"href":"https://api.github.com/repos/src-d/lookout/issues/756/comments"},"review_comments":{"href":"https://api.github.com/repos/src-d/lookout/pulls/756/comments"},"review_comment":{"href":"https://api.github.com/repos/src-d/lookout/pulls/comments{/number}"},"commits":{"href":"https://api.github.com/repos/src-d/lookout/pulls/756/commits"},"statuses":{"href":"https://api.github.com/repos/src-d/lookout/statuses/baebf8a07c92ea49585b0ec4e0fe5c6e2d7662ce"}},"author_association":"NONE","auto_merge":null,"assignee":null,"active_lock_reason":null},{"url":"https://api.github.com/repos/src-d/lookout/pulls/740","id":387978614,"node_id":"MDExOlB1bGxSZXF1ZXN0Mzg3OTc4NjE0","html_url":"https://github.com/src-d/lookout/pull/740","diff_url":"https://github.com/src-d/lookout/pull/740.diff","patch_url":"https://github.com/src-d/lookout/pull/740.patch","issue_url":"https://api.github.com/repos/src-d/lookout/issues/740","number":740,"state":"open","locked":false,"title":"[Security] Bump acorn from 5.7.3 to 5.7.4 in /frontend","user":{"login":"dependabot-preview[bot]","id":27856297,"node_id":"MDM6Qm90Mjc4NTYyOTc=","avatar_url":"https://avatars.githubusercontent.com/in/2141?v=4","gravatar_id":"","url":"https://api.github.com/users/dependabot-preview%5Bbot%5D","html_url":"https://github.com/apps/dependabot-preview","followers_url":"https://api.github.com/users/dependabot-preview%5Bbot%5D/followers","following_url":"https://api.github.com/users/dependabot-preview%5Bbot%5D/following{/other_user}","gists_url":"https://api.github.com/users/dependabot-preview%5Bbot%5D/gists{/gist_id}","starred_url":"https://api.github.com/users/dependabot-preview%5Bbot%5D/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/dependabot-preview%5Bbot%5D/subscriptions","organizations_url":"https://api.github.com/users/dependabot-preview%5Bbot%5D/orgs","repos_url":"https://api.github.com/users/dependabot-preview%5Bbot%5D/repos","events_url":"https://api.github.com/users/dependabot-preview%5Bbot%5D/events{/privacy}","received_events_url":"https://api.github.com/users/dependabot-preview%5Bbot%5D/received_events","type":"Bot","user_view_type":"public","site_admin":false},"body":"Bumps [acorn](https://github.com/acornjs/acorn) from 5.7.3 to 5.7.4. **This update includes a security fix.**\n<details>\n<summary>Vulnerabilities fixed</summary>\n<p><em>Sourced from <a href=\"https://github.com/advisories/GHSA-7fhm-mqm4-2wp7\">The GitHub Security Advisory Database</a>.</em></p>\n<blockquote>\n<p><strong>Moderate severity vulnerability that affects acorn, minimist, and svjsl</strong>\nThere are high severity security vulnerabilities in two of ESLints dependencies:\n- <a href=\"https://app.snyk.io/vuln/SNYK-JS-ACORN-559469\">acorn</a>\n- <a href=\"https://app.snyk.io/vuln/SNYK-JS-MINIMIST-559764\">minimist</a></p>\n<p>The releases 1.8.3 and lower of svjsl (JSLib-npm) are vulnerable, but only if installed in a developer environment. A patch has been released (v1.8.4) which fixes these vulnerabilities.</p>\n<p>Identifiers:</p>\n<ul>\n<li><a href=\"https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-7598\">CVE-2020-7598</a></li>\n<li>SNYK-JS-ACORN-559469 (doesn&amp;#39;t have a CVE identifier)</li>\n</ul>\n<p>Affected versions: &lt; 5.7.4</p>\n</blockquote>\n</details>\n<details>\n<summary>Commits</summary>\n<ul>\n<li><a href=\"https://github.com/acornjs/acorn/commit/6370e90067552022710190319cbbbd8c43001957\"><code>6370e90</code></a> Mark version 5.7.4</li>\n<li><a href=\"https://github.com/acornjs/acorn/commit/fbc15b1344f6dfb992f67b4bbf1357436247c8a0\"><code>fbc15b1</code></a> More rigorously check surrogate pairs in regexp validator</li>\n<li>See full diff in <a href=\"https://github.com/acornjs/acorn/compare/5.7.3...5.7.4\">compare view</a></li>\n</ul>\n</details>\n<br />\n\n\n[![Dependabot compatibility score](https://api.dependabot.com/badges/compatibility_score?dependency-name=acorn&package-manager=npm_and_yarn&previous-version=5.7.3&new-version=5.7.4)](https://dependabot.com/compatibility-score/?dependency-name=acorn&package-manager=npm_and_yarn&previous-version=5.7.3&new-version=5.7.4)\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n<details>\n<summary>Dependabot commands and options</summary>\n<br />\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot merge` will merge this PR after your CI passes on it\n- `@dependabot squash and merge` will squash and merge this PR after your CI passes on it\n- `@dependabot cancel merge` will cancel a previously requested merge and block automerging\n- `@dependabot reopen` will reopen this PR if it is closed\n- `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually\n- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot use these labels` will set the current labels as the default for future PRs for this repo and language\n- `@dependabot use these reviewers` will set the current reviewers as the default for future PRs for this repo and language\n- `@dependabot use these assignees` will set the current assignees as the default for future PRs for this repo and language\n- `@dependabot use this milestone` will set the current milestone as the default for future PRs for this repo and language\n- `@dependabot badge me` will comment on this PR with code to add a \"Dependabot enabled\" badge to your readme\n\nAdditionally, you can set the following in your Dependabot [dashboard](https://app.dependabot.com):\n- Update frequency (including time of day and day of week)\n- Pull request limits (per update run and/or open at any time)\n- Automerge options (never/patch/minor, and dev/runtime dependencies)\n- Out-of-range updates (receive only lockfile updates, if desired)\n- Security updates (receive only security updates, if desired)\n\n\n\n</details>","created_at":"2020-03-13T20:55:25Z","updated_at":"2020-03-13T20:55:27Z","closed_at":null,"merged_at":null,"merge_commit_sha":"940cb8c76efde610f466d69e384233f3213ae9d4","assignees":[],"requested_reviewers":[],"requested_teams":[],"labels":[{"id":1224325914,"node_id":"MDU6TGFiZWwxMjI0MzI1OTE0","url":"https://api.github.com/repos/src-d/lookout/labels/dependencies","name":"dependencies","color":"0025ff","default":false,"description":"Pull requests that update a dependency file"},{"id":1225416698,"node_id":"MDU6TGFiZWwxMjI1NDE2Njk4","url":"https://api.github.com/repos/src-d/lookout/labels/javascript","name":"javascript","color":"168700","default":false,"description":"Pull requests that update Javascript code"},{"id":1445656551,"node_id":"MDU6TGFiZWwxNDQ1NjU2NTUx","url":"https://api.github.com/repos/src-d/lookout/labels/security","name":"security","color":"ee0701","default":false,"description":"Pull requests that address a security vulnerability"}],"milestone":null,"draft":false,"commits_url":"https://api.github.com/repos/src-d/lookout/pulls/740/commits","review_comments_url":"https://api.github.com/repos/src-d/lookout/pulls/740/comments","review_comment_url":"https://api.github.com/repos/src-d/lookout/pulls/comments{/number}","comments_url":"https://api.github.com/repos/src-d/lookout/issues/740/comments","statuses_url":"https://api.github.com/repos/src-d/lookout/statuses/2cb101ae8f5e3001cfebd8747177161fb04e8906","head":{"label":"src-d:dependabot/npm_and_yarn/frontend/acorn-5.7.4","ref":"dependabot/npm_and_yarn/frontend/acorn-5.7.4","sha":"2cb101ae8f5e3001cfebd8747177161fb04e8906","user":{"login":"src-d","id":15128793,"node_id":"MDEyOk9yZ2FuaXphdGlvbjE1MTI4Nzkz","avatar_url":"https://avatars.githubusercontent.com/u/15128793?v=4","gravatar_id":"","url":"https://api.github.com/users/src-d","html_url":"https://github.com/src-d","followers_url":"https://api.github.com/users/src-d/followers","following_url":"https://api.github.com/users/src-d/following{/other_user}","gists_url":"https://api.github.com/users/src-d/gists{/gist_id}","starred_url":"https://api.github.com/users/src-d/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/src-d/subscriptions","organizations_url":"https://api.github.com/users/src-d/orgs","repos_url":"https://api.github.com/users/src-d/repos","events_url":"https://api.github.com/users/src-d/events{/privacy}","received_events_url":"https://api.github.com/users/src-d/received_events","type":"Organization","user_view_type":"public","site_admin":false},"repo":{"id":136146572,"node_id":"MDEwOlJlcG9zaXRvcnkxMzYxNDY1NzI=","name":"lookout","full_name":"src-d/lookout","private":false,"owner":{"login":"src-d","id":15128793,"node_id":"MDEyOk9yZ2FuaXphdGlvbjE1MTI4Nzkz","avatar_url":"https://avatars.githubusercontent.com/u/15128793?v=4","gravatar_id":"","url":"https://api.github.com/users/src-d","html_url":"https://github.com/src-d","followers_url":"https://api.github.com/users/src-d/followers","following_url":"https://api.github.com/users/src-d/following{/other_user}","gists_url":"https://api.github.com/users/src-d/gists{/gist_id}","starred_url":"https://api.github.com/users/src-d/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/src-d/subscriptions","organizations_url":"https://api.github.com/users/src-d/orgs","repos_url":"https://api.github.com/users/src-d/repos","events_url":"https://api.github.com/users/src-d/events{/privacy}","received_events_url":"https://api.github.com/users/src-d/received_events","type":"Organization","user_view_type":"public","site_admin":false},"html_url":"https://github.com/src-d/lookout","description":"Assisted code review, running custom code analyzers on pull requests","fork":false,"url":"https://api.github.com/repos/src-d/lookout","forks_url":"https://api.github.com/repos/src-d/lookout/forks","keys_url":"https://api.github.com/repos/src-d/lookout/keys{/key_id}","collaborators_url":"https://api.github.com/repos/src-d/lookout/collaborators{/collaborator}","teams_url":"https://api.github.com/repos/src-d/lookout/teams","hooks_url":"https://api.github.com/repos/src-d/lookout/hooks","issue_events_url":"https://api.github.com/repos/src-d/lookout/issues/events{/number}","events_url":"https://api.github.com/repos/src-d/lookout/events","assignees_url":"https://api.github.com/repos/src-d/lookout/assignees{/user}","branches_url":"https://api.github.com/repos/src-d/lookout/branches{/branch}","tags_url":"https://api.github.com/repos/src-d/lookout/tags","blobs_url":"https://api.github.com/repos/src-d/lookout/git/blobs{/sha}","git_tags_url":"https://api.github.com/repos/src-d/lookout/git/tags{/sha}","git_refs_url":"https://api.github.com/repos/src-d/lookout/git/refs{/sha}","trees_url":"https://api.github.com/repos/src-d/lookout/git/trees{/sha}","statuses_url":"https://api.github.com/repos/src-d/lookout/statuses/{sha}","languages_url":"https://api.github.com/repos/src-d/lookout/languages","stargazers_url":"https://api.github.com/repos/src-d/lookout/stargazers","contributors_url":"https://api.github.com/repos/src-d/lookout/contributors","subscribers_url":"https://api.github.com/repos/src-d/lookout/subscribers","subscription_url":"https://api.github.com/repos/src-d/lookout/subscription","commits_url":"https://api.github.com/repos/src-d/lookout/commits{/sha}","git_commits_url":"https://api.github.com/repos/src-d/lookout/git/commits{/sha}","comments_url":"https://api.github.com/repos/src-d/lookout/comments{/number}","issue_comment_url":"https://api.github.com/repos/src-d/lookout/issues/comments{/number}","contents_url":"https://api.github.com/repos/src-d/lookout/contents/{+path}","compare_url":"https://api.github.com/repos/src-d/lookout/compare/{base}...{head}","merges_url":"https://api.github.com/repos/src-d/lookout/merges","archive_url":"https://api.github.com/repos/src-d/lookout/{archive_format}{/ref}","downloads_url":"https://api.github.com/repos/src-d/lookout/downloads","issues_url":"https://api.github.com/repos/src-d/lookout/issues{/number}","pulls_url":"https://api.github.com/repos/src-d/lookout/pulls{/number}","milestones_url":"https://api.github.com/repos/src-d/lookout/milestones{/number}","notifications_url":"https://api.github.com/repos/src-d/lookout/notifications{?since,all,participating}","labels_url":"https://api.github.com/repos/src-d/lookout/labels{/name}","releases_url":"https://api.github.com/repos/src-d/lookout/releases{/id}","deployments_url":"https://api.github.com/repos/src-d/lookout/deployments","created_at":"2018-06-05T08:37:23Z","updated_at":"2025-10-05T17:39:33Z","pushed_at":"2021-08-03T19:18:36Z","git_url":"git://github.com/src-d/lookout.git","ssh_url":"git@github.com:src-d/lookout.git","clone_url":"https://github.com/src-d/lookout.git","svn_url":"https://github.com/src-d/lookout","homepage":"https://docs.sourced.tech/lookout","size":60130,"stargazers_count":152,"watchers_count":152,"language":"Go","has_issues":true,"has_projects":false,"has_downloads":true,"has_wiki":false,"has_pages":false,"has_discussions":false,"forks_count":33,"mirror_url":null,"archived":false,"disabled":false,"open_issues_count":84,"license":{"key":"agpl-3.0","name":"GNU Affero General Public License v3.0","spdx_id":"AGPL-3.0","url":"https://api.github.com/licenses/agpl-3.0","node_id":"MDc6TGljZW5zZTE="},"allow_forking":true,"is_template":false,"web_commit_signoff_required":false,"has_pull_requests":true,"pull_request_creation_policy":"all","topics":["code-review","github","lookout"],"visibility":"public","forks":33,"open_issues":84,"watchers":152,"default_branch":"master"}},"base":{"label":"src-d:master","ref":"master","sha":"d5cccd9aed531327965c374533f42e0469af4cda","user":{"login":"src-d","id":15128793,"node_id":"MDEyOk9yZ2FuaXphdGlvbjE1MTI4Nzkz","avatar_url":"https://avatars.githubusercontent.com/u/15128793?v=4","gravatar_id":"","url":"https://api.github.com/users/src-d","html_url":"https://github.com/src-d","followers_url":"https://api.github.com/users/src-d/followers","following_url":"https://api.github.com/users/src-d/following{/other_user}","gists_url":"https://api.github.com/users/src-d/gists{/gist_id}","starred_url":"https://api.github.com/users/src-d/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/src-d/subscriptions","organizations_url":"https://api.github.com/users/src-d/orgs","repos_url":"https://api.github.com/users/src-d/repos","events_url":"https://api.github.com/users/src-d/events{/privacy}","received_events_url":"https://api.github.com/users/src-d/received_events","type":"Organization","user_view_type":"public","site_admin":false},"repo":{"id":136146572,"node_id":"MDEwOlJlcG9zaXRvcnkxMzYxNDY1NzI=","name":"lookout","full_name":"src-d/lookout","private":false,"owner":{"login":"src-d","id":15128793,"node_id":"MDEyOk9yZ2FuaXphdGlvbjE1MTI4Nzkz","avatar_url":"https://avatars.githubusercontent.com/u/15128793?v=4","gravatar_id":"","url":"https://api.github.com/users/src-d","html_url":"https://github.com/src-d","followers_url":"https://api.github.com/users/src-d/followers","following_url":"https://api.github.com/users/src-d/following{/other_user}","gists_url":"https://api.github.com/users/src-d/gists{/gist_id}","starred_url":"https://api.github.com/users/src-d/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/src-d/subscriptions","organizations_url":"https://api.github.com/users/src-d/orgs","repos_url":"https://api.github.com/users/src-d/repos","events_url":"https://api.github.com/users/src-d/events{/privacy}","received_events_url":"https://api.github.com/users/src-d/received_events","type":"Organization","user_view_type":"public","site_admin":false},"html_url":"https://github.com/src-d/lookout","description":"Assisted code review, running custom code analyzers on pull requests","fork":false,"url":"https://api.github.com/repos/src-d/lookout","forks_url":"https://api.github.com/repos/src-d/lookout/forks","keys_url":"https://api.github.com/repos/src-d/lookout/keys{/key_id}","collaborators_url":"https://api.github.com/repos/src-d/lookout/collaborators{/collaborator}","teams_url":"https://api.github.com/repos/src-d/lookout/teams","hooks_url":"https://api.github.com/repos/src-d/lookout/hooks","issue_events_url":"https://api.github.com/repos/src-d/lookout/issues/events{/number}","events_url":"https://api.github.com/repos/src-d/lookout/events","assignees_url":"https://api.github.com/repos/src-d/lookout/assignees{/user}","branches_url":"https://api.github.com/repos/src-d/lookout/branches{/branch}","tags_url":"https://api.github.com/repos/src-d/lookout/tags","blobs_url":"https://api.github.com/repos/src-d/lookout/git/blobs{/sha}","git_tags_url":"https://api.github.com/repos/src-d/lookout/git/tags{/sha}","git_refs_url":"https://api.github.com/repos/src-d/lookout/git/refs{/sha}","trees_url":"https://api.github.com/repos/src-d/lookout/git/trees{/sha}","statuses_url":"https://api.github.com/repos/src-d/lookout/statuses/{sha}","languages_url":"https://api.github.com/repos/src-d/lookout/languages","stargazers_url":"https://api.github.com/repos/src-d/lookout/stargazers","contributors_url":"https://api.github.com/repos/src-d/lookout/contributors","subscribers_url":"https://api.github.com/repos/src-d/lookout/subscribers","subscription_url":"https://api.github.com/repos/src-d/lookout/subscription","commits_url":"https://api.github.com/repos/src-d/lookout/commits{/sha}","git_commits_url":"https://api.github.com/repos/src-d/lookout/git/commits{/sha}","comments_url":"https://api.github.com/repos/src-d/lookout/comments{/number}","issue_comment_url":"https://api.github.com/repos/src-d/lookout/issues/comments{/number}","contents_url":"https://api.github.com/repos/src-d/lookout/contents/{+path}","compare_url":"https://api.github.com/repos/src-d/lookout/compare/{base}...{head}","merges_url":"https://api.github.com/repos/src-d/lookout/merges","archive_url":"https://api.github.com/repos/src-d/lookout/{archive_format}{/ref}","downloads_url":"https://api.github.com/repos/src-d/lookout/downloads","issues_url":"https://api.github.com/repos/src-d/lookout/issues{/number}","pulls_url":"https://api.github.com/repos/src-d/lookout/pulls{/number}","milestones_url":"https://api.github.com/repos/src-d/lookout/milestones{/number}","notifications_url":"https://api.github.com/repos/src-d/lookout/notifications{?since,all,participating}","labels_url":"https://api.github.com/repos/src-d/lookout/labels{/name}","releases_url":"https://api.github.com/repos/src-d/lookout/releases{/id}","deployments_url":"https://api.github.com/repos/src-d/lookout/deployments","created_at":"2018-06-05T08:37:23Z","updated_at":"2025-10-05T17:39:33Z","pushed_at":"2021-08-03T19:18:36Z","git_url":"git://github.com/src-d/lookout.git","ssh_url":"git@github.com:src-d/lookout.git","clone_url":"https://github.com/src-d/lookout.git","svn_url":"https://github.com/src-d/lookout","homepage":"https://docs.sourced.tech/lookout","size":60130,"stargazers_count":152,"watchers_count":152,"language":"Go","has_issues":true,"has_projects":false,"has_downloads":true,"has_wiki":false,"has_pages":false,"has_discussions":false,"forks_count":33,"mirror_url":null,"archived":false,"disabled":false,"open_issues_count":84,"license":{"key":"agpl-3.0","name":"GNU Affero General Public License v3.0","spdx_id":"AGPL-3.0","url":"https://api.github.com/licenses/agpl-3.0","node_id":"MDc6TGljZW5zZTE="},"allow_forking":true,"is_template":false,"web_commit_signoff_required":false,"has_pull_requests":true,"pull_request_creation_policy":"all","topics":["code-review","github","lookout"],"visibility":"public","forks":33,"open_issues":84,"watchers":152,"default_branch":"master"}},"_links":{"self":{"href":"https://api.github.com/repos/src-d/lookout/pulls/740"},"html":{"href":"https://github.com/src-d/lookout/pull/740"},"issue":{"href":"https://api.github.com/repos/src-d/lookout/issues/740"},"comments":{"href":"https://api.github.com/repos/src-d/lookout/issues/740/comments"},"review_comments":{"href":"https://api.github.com/repos/src-d/lookout/pulls/740/comments"},"review_comment":{"href":"https://api.github.com/repos/src-d/lookout/pulls/comments{/number}"},"commits":{"href":"https://api.github.com/repos/src-d/lookout/pulls/740/commits"},"statuses":{"href":"https://api.github.com/repos/src-d/lookout/statuses/2cb101ae8f5e3001cfebd8747177161fb04e8906"}},"author_association":"NONE","auto_merge":null,"assignee":null,"active_lock_reason":null},{"url":"https://api.github.com/repos/src-d/lookout/pulls/734","id":381991361,"node_id":"MDExOlB1bGxSZXF1ZXN0MzgxOTkxMzYx","html_url":"https://github.com/src-d/lookout/pull/734","diff_url":"https://github.com/src-d/lookout/pull/734.diff","patch_url":"https://github.com/src-d/lookout/pull/734.patch","issue_url":"https://api.github.com/repos/src-d/lookout/issues/734","number":734,"state":"open","locked":false,"title":"Bump react-dom from 16.8.4 to 16.13.0 in /frontend","user":{"login":"dependabot-preview[bot]","id":27856297,"node_id":"MDM6Qm90Mjc4NTYyOTc=","avatar_url":"https://avatars.githubusercontent.com/in/2141?v=4","gravatar_id":"","url":"https://api.github.com/users/dependabot-preview%5Bbot%5D","html_url":"https://github.com/apps/dependabot-preview","followers_url":"https://api.github.com/users/dependabot-preview%5Bbot%5D/followers","following_url":"https://api.github.com/users/dependabot-preview%5Bbot%5D/following{/other_user}","gists_url":"https://api.github.com/users/dependabot-preview%5Bbot%5D/gists{/gist_id}","starred_url":"https://api.github.com/users/dependabot-preview%5Bbot%5D/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/dependabot-preview%5Bbot%5D/subscriptions","organizations_url":"https://api.github.com/users/dependabot-preview%5Bbot%5D/orgs","repos_url":"https://api.github.com/users/dependabot-preview%5Bbot%5D/repos","events_url":"https://api.github.com/users/dependabot-preview%5Bbot%5D/events{/privacy}","received_events_url":"https://api.github.com/users/dependabot-preview%5Bbot%5D/received_events","type":"Bot","user_view_type":"public","site_admin":false},"body":"Bumps [react-dom](https://github.com/facebook/react/tree/HEAD/packages/react-dom) from 16.8.4 to 16.13.0.\n<details>\n<summary>Release notes</summary>\n<p><em>Sourced from <a href=\"https://github.com/facebook/react/releases\">react-dom's releases</a>.</em></p>\n<blockquote>\n<h2>16.13.0 (February 26, 2020)</h2>\n<h3>React</h3>\n<ul>\n<li>Warn when a string ref is used in a manner that's not amenable to a future codemod (<a href=\"https://github.com/lunaruan\">@lunaruan</a> in <a href=\"https://github-redirect.dependabot.com/facebook/react/pull/17864\">#17864</a>)</li>\n<li>Deprecate <code>React.createFactory()</code> (<a href=\"https://github.com/trueadm\">@trueadm</a> in <a href=\"https://github-redirect.dependabot.com/facebook/react/pull/17878\">#17878</a>)</li>\n</ul>\n<h3>React DOM</h3>\n<ul>\n<li>Warn when changes in <code>style</code> may cause an unexpected collision (<a href=\"https://github.com/sophiebits\">@sophiebits</a> in <a href=\"https://github-redirect.dependabot.com/facebook/react/pull/14181\">#14181</a>, <a href=\"https://github-redirect.dependabot.com/facebook/react/pull/18002\">#18002</a>)</li>\n<li>Warn when a function component is updated during another component's render phase (<a href=\"(https://github.com/acdlite)\">@acdlite</a> in <a href=\"https://github-redirect.dependabot.com/facebook/react/pull/17099\">#17099</a>)</li>\n<li>Deprecate <code>unstable_createPortal</code> (<a href=\"https://github.com/trueadm\">@trueadm</a> in <a href=\"https://github-redirect.dependabot.com/facebook/react/pull/17880\">#17880</a>)</li>\n<li>Fix <code>onMouseEnter</code> being fired on disabled buttons (<a href=\"https://github.com/AlfredoGJ\">@AlfredoGJ</a> in <a href=\"https://github-redirect.dependabot.com/facebook/react/pull/17675\">#17675</a>)</li>\n<li>Call <code>shouldComponentUpdate</code> twice when developing in <code>StrictMode</code> (<a href=\"https://github.com/bvaughn\">@bvaughn</a> in <a href=\"https://github-redirect.dependabot.com/facebook/react/pull/17942\">#17942</a>)</li>\n<li>Add <code>version</code> property to ReactDOM (<a href=\"https://github.com/ealush\">@ealush</a> in <a href=\"https://github-redirect.dependabot.com/facebook/react/pull/15780\">#15780</a>)</li>\n<li>Don't call <code>toString()</code> of <code>dangerouslySetInnerHTML</code> (<a href=\"https://github.com/sebmarkbage\">@sebmarkbage</a> in <a href=\"https://github-redirect.dependabot.com/facebook/react/pull/17773\">#17773</a>)</li>\n<li>Show component stacks in more warnings (<a href=\"https://github.com/gaearon\">@gaearon</a> in <a href=\"https://github-redirect.dependabot.com/facebook/react/pull/17922\">#17922</a>, <a href=\"https://github-redirect.dependabot.com/facebook/react/pull/17586\">#17586</a>)</li>\n</ul>\n<h3>Concurrent Mode (Experimental)</h3>\n<ul>\n<li>Warn for problematic usages of <code>ReactDOM.createRoot()</code> (<a href=\"https://github.com/trueadm\">@trueadm</a> in <a href=\"https://github-redirect.dependabot.com/facebook/react/pull/17937\">#17937</a>)</li>\n<li>Remove <code>ReactDOM.createRoot()</code> callback params and added warnings on usage (<a href=\"https://github.com/bvaughn\">@bvaughn</a> in <a href=\"https://github-redirect.dependabot.com/facebook/react/pull/17916\">#17916</a>)</li>\n<li>Don't group Idle/Offscreen work with other work (<a href=\"https://github.com/sebmarkbage\">@sebmarkbage</a> in <a href=\"https://github-redirect.dependabot.com/facebook/react/pull/17456\">#17456</a>)</li>\n<li>Adjust <code>SuspenseList</code> CPU bound heuristic (<a href=\"https://github.com/sebmarkbage\">@sebmarkbage</a> in <a href=\"https://github-redirect.dependabot.com/facebook/react/pull/17455\">#17455</a>)</li>\n<li>Add missing event plugin priorities (<a href=\"https://github.com/trueadm\">@trueadm</a> in <a href=\"https://github-redirect.dependabot.com/facebook/react/pull/17914\">#17914</a>)</li>\n<li>Fix <code>isPending</code> only being true when transitioning from inside an input event (<a href=\"https://github.com/acdlite\">@acdlite</a> in <a href=\"https://github-redirect.dependabot.com/facebook/react/pull/17382\">#17382</a>)</li>\n<li>Fix <code>React.memo</code> components dropping updates when interrupted by a higher priority update (<a href=\"(https://github.com/acdlite)\">@acdlite</a> in <a href=\"https://github-redirect.dependabot.com/facebook/react/pull/18091\">#18091</a>)</li>\n<li>Don't warn when suspending at the wrong priority (<a href=\"https://github.com/gaearon\">@gaearon</a> in <a href=\"https://github-redirect.dependabot.com/facebook/react/pull/17971\">#17971</a>)</li>\n<li>Fix a bug with rebasing updates (<a href=\"https://github.com/acdlite\">@acdlite</a> and <a href=\"https://github.com/sebmarkbage\">@sebmarkbage</a> in <a href=\"https://github-redirect.dependabot.com/facebook/react/pull/17560\">#17560</a>, <a href=\"https://github-redirect.dependabot.com/facebook/react/pull/17510\">#17510</a>, <a href=\"https://github-redirect.dependabot.com/facebook/react/pull/17483\">#17483</a>, <a href=\"https://github-redirect.dependabot.com/facebook/react/pull/17480\">#17480</a>)</li>\n</ul>\n<h2>Artifacts</h2>\n<ul>\n<li>react: <a href=\"https://unpkg.com/react@16.13.0/umd/\">https://unpkg.com/react@16.13.0/umd/</a></li>\n<li>react-art: <a href=\"https://unpkg.com/react-art@16.13.0/umd/\">https://unpkg.com/react-art@16.13.0/umd/</a></li>\n<li>react-dom: <a href=\"https://unpkg.com/react-dom@16.13.0/umd/\">https://unpkg.com/react-dom@16.13.0/umd/</a></li>\n<li>react-is: <a href=\"https://unpkg.com/react-is@16.13.0/umd/\">https://unpkg.com/react-is@16.13.0/umd/</a></li>\n<li>react-test-renderer: <a href=\"https://unpkg.com/react-test-renderer@16.13.0/umd/\">https://unpkg.com/react-test-renderer@16.13.0/umd/</a></li>\n<li>scheduler: <a href=\"https://unpkg.com/scheduler@0.19.0/umd/\">https://unpkg.com/scheduler@0.19.0/umd/</a></li>\n</ul>\n<h2>16.12.0 (November 14, 2019)</h2>\n<h3>React DOM</h3>\n<ul>\n<li>Fix passive effects (<code>useEffect</code>) not being fired in a multi-root app. (<a href=\"https://github.com/acdlite\">@acdlite</a> in <a href=\"https://github-redirect.dependabot.com/facebook/react/pull/17347\">#17347</a>)</li>\n</ul>\n<h3>React Is</h3>\n<ul>\n<li>Fix <code>lazy</code> and <code>memo</code> types considered elements instead of components (<a href=\"https://github.com/bvaughn\">@bvaughn</a> in <a href=\"https://github-redirect.dependabot.com/facebook/react/pull/17278\">#17278</a>)</li>\n</ul>\n<h2>Artifacts</h2>\n<p>• react: <a href=\"https://unpkg.com/react@16.12.0/umd/\">https://unpkg.com/react@16.12.0/umd/</a></p>\n</tr></table> ... (truncated)\n</blockquote>\n</details>\n<details>\n<summary>Changelog</summary>\n<p><em>Sourced from <a href=\"https://github.com/facebook/react/blob/master/CHANGELOG.md\">react-dom's changelog</a>.</em></p>\n<blockquote>\n<h2>16.13.0 (February 26, 2020)</h2>\n<h3>React</h3>\n<ul>\n<li>Warn when a string ref is used in a manner that's not amenable to a future codemod (<a href=\"https://github.com/lunaruan\">@lunaruan</a> in <a href=\"https://github-redirect.dependabot.com/facebook/react/pull/17864\">#17864</a>)</li>\n<li>Deprecate <code>React.createFactory()</code> (<a href=\"https://github.com/trueadm\">@trueadm</a> in <a href=\"https://github-redirect.dependabot.com/facebook/react/pull/17878\">#17878</a>)</li>\n</ul>\n<h3>React DOM</h3>\n<ul>\n<li>Warn when changes in <code>style</code> may cause an unexpected collision (<a href=\"https://github.com/sophiebits\">@sophiebits</a> in <a href=\"https://github-redirect.dependabot.com/facebook/react/pull/14181\">#14181</a>, <a href=\"https://github-redirect.dependabot.com/facebook/react/pull/18002\">#18002</a>)</li>\n<li>Warn when a function component is updated during another component's render phase (<a href=\"https://github.com/acdlite\">@acdlite</a> in <a href=\"https://github-redirect.dependabot.com/facebook/react/pull/17099\">#17099</a>)</li>\n<li>Deprecate <code>unstable_createPortal</code> (<a href=\"https://github.com/trueadm\">@trueadm</a> in <a href=\"https://github-redirect.dependabot.com/facebook/react/pull/17880\">#17880</a>)</li>\n<li>Fix <code>onMouseEnter</code> being fired on disabled buttons (<a href=\"https://github.com/AlfredoGJ\">@AlfredoGJ</a> in <a href=\"https://github-redirect.dependabot.com/facebook/react/pull/17675\">#17675</a>)</li>\n<li>Call <code>shouldComponentUpdate</code> twice when developing in <code>StrictMode</code> (<a href=\"https://github.com/bvaughn\">@bvaughn</a> in <a href=\"https://github-redirect.dependabot.com/facebook/react/pull/17942\">#17942</a>)</li>\n<li>Add <code>version</code> property to ReactDOM (<a href=\"https://github.com/ealush\">@ealush</a> in <a href=\"https://github-redirect.dependabot.com/facebook/react/pull/15780\">#15780</a>)</li>\n<li>Don't call <code>toString()</code> of <code>dangerouslySetInnerHTML</code> (<a href=\"https://github.com/sebmarkbage\">@sebmarkbage</a> in <a href=\"https://github-redirect.dependabot.com/facebook/react/pull/17773\">#17773</a>)</li>\n<li>Show component stacks in more warnings (<a href=\"https://github.com/gaearon\">@gaearon</a> in <a href=\"https://github-redirect.dependabot.com/facebook/react/pull/17922\">#17922</a>, <a href=\"https://github-redirect.dependabot.com/facebook/react/pull/17586\">#17586</a>)</li>\n</ul>\n<h3>Concurrent Mode (Experimental)</h3>\n<ul>\n<li>Warn for problematic usages of <code>ReactDOM.createRoot()</code> (<a href=\"https://github.com/trueadm\">@trueadm</a> in <a href=\"https://github-redirect.dependabot.com/facebook/react/pull/17937\">#17937</a>)</li>\n<li>Remove <code>ReactDOM.createRoot()</code> callback params and added warnings on usage (<a href=\"https://github.com/bvaughn\">@bvaughn</a> in <a href=\"https://github-redirect.dependabot.com/facebook/react/pull/17916\">#17916</a>)</li>\n<li>Don't group Idle/Offscreen work with other work (<a href=\"https://github.com/sebmarkbage\">@sebmarkbage</a> in <a href=\"https://github-redirect.dependabot.com/facebook/react/pull/17456\">#17456</a>)</li>\n<li>Adjust <code>SuspenseList</code> CPU bound heuristic (<a href=\"https://github.com/sebmarkbage\">@sebmarkbage</a> in <a href=\"https://github-redirect.dependabot.com/facebook/react/pull/17455\">#17455</a>)</li>\n<li>Add missing event plugin priorities (<a href=\"https://github.com/trueadm\">@trueadm</a> in <a href=\"https://github-redirect.dependabot.com/facebook/react/pull/17914\">#17914</a>)</li>\n<li>Fix <code>isPending</code> only being true when transitioning from inside an input event (<a href=\"https://github.com/acdlite\">@acdlite</a> in <a href=\"https://github-redirect.dependabot.com/facebook/react/pull/17382\">#17382</a>)</li>\n<li>Fix <code>React.memo</code> components dropping updates when interrupted by a higher priority update (<a href=\"(https://github.com/acdlite)\">@acdlite</a> in <a href=\"https://github-redirect.dependabot.com/facebook/react/pull/18091\">#18091</a>)</li>\n<li>Don't warn when suspending at the wrong priority (<a href=\"https://github.com/gaearon\">@gaearon</a> in <a href=\"https://github-redirect.dependabot.com/facebook/react/pull/17971\">#17971</a>)</li>\n<li>Fix a bug with rebasing updates (<a href=\"https://github.com/acdlite\">@acdlite</a> and <a href=\"https://github.com/sebmarkbage\">@sebmarkbage</a> in <a href=\"https://github-redirect.dependabot.com/facebook/react/pull/17560\">#17560</a>, <a href=\"https://github-redirect.dependabot.com/facebook/react/pull/17510\">#17510</a>, <a href=\"https://github-redirect.dependabot.com/facebook/react/pull/17483\">#17483</a>, <a href=\"https://github-redirect.dependabot.com/facebook/react/pull/17480\">#17480</a>)</li>\n</ul>\n<h2>16.12.0 (November 14, 2019)</h2>\n<h3>React DOM</h3>\n<ul>\n<li>Fix passive effects (<code>useEffect</code>) not being fired in a multi-root app. (<a href=\"https://github.com/acdlite\">@acdlite</a> in <a href=\"https://github-redirect.dependabot.com/facebook/react/pull/17347\">#17347</a>)</li>\n</ul>\n<h3>React Is</h3>\n<ul>\n<li>Fix <code>lazy</code> and <code>memo</code> types considered elements instead of components (<a href=\"https://github.com/bvaughn\">@bvaughn</a> in <a href=\"https://github-redirect.dependabot.com/facebook/react/pull/17278\">#17278</a>)</li>\n</ul>\n<h2>16.11.0 (October 22, 2019)</h2>\n<h3>React DOM</h3>\n<ul>\n<li>Fix <code>mouseenter</code> handlers from firing twice inside nested React containers. <a href=\"https://github.com/yuanoook\">@yuanoook</a> in <a href=\"https://github-redirect.dependabot.com/facebook/react/pull/16928\">#16928</a></li>\n<li>Remove <code>unstable_createRoot</code> and <code>unstable_createSyncRoot</code> experimental APIs. (These are available in the Experimental channel as <code>createRoot</code> and <code>createSyncRoot</code>.) (<a href=\"http://github.com/acdlite\">@acdlite</a> in <a href=\"https://github-redirect.dependabot.com/facebook/react/pull/17088\">#17088</a>)</li>\n</ul>\n<h2>16.10.2 (October 3, 2019)</h2>\n<h3>React DOM</h3>\n</tr></table> ... (truncated)\n</blockquote>\n</details>\n<details>\n<summary>Commits</summary>\n<ul>\n<li><a href=\"https://github.com/facebook/react/commit/c1c5499cc3fd179004911b3391a55de1af4de037\"><code>c1c5499</code></a> update version numbers for 16.13 (<a href=\"https://github.com/facebook/react/tree/HEAD/packages/react-dom/issues/18143\">#18143</a>)</li>\n<li><a href=\"https://github.com/facebook/react/commit/f3ecd56beacd4a2849a1bac4faab5d41b7ad758b\"><code>f3ecd56</code></a> Fixed a spelling mistake in a comment. (<a href=\"https://github.com/facebook/react/tree/HEAD/packages/react-dom/issues/18119\">#18119</a>)</li>\n<li><a href=\"https://github.com/facebook/react/commit/60016c448bb7d19fc989acd05dda5aca2e124381\"><code>60016c4</code></a> Export React as Named Exports instead of CommonJS (<a href=\"https://github.com/facebook/react/tree/HEAD/packages/react-dom/issues/18106\">#18106</a>)</li>\n<li><a href=\"https://github.com/facebook/react/commit/ccab49473897aacae43bb4d55c1061065892403c\"><code>ccab494</code></a> Move type DOMContainer to HostConfig (<a href=\"https://github.com/facebook/react/tree/HEAD/packages/react-dom/issues/18112\">#18112</a>)</li>\n<li><a href=\"https://github.com/facebook/react/commit/09348798a912c8682e57c35842aa7a007e13fdb9\"><code>0934879</code></a> Codemod to import * as React from &quot;react&quot;; (<a href=\"https://github.com/facebook/react/tree/HEAD/packages/react-dom/issues/18102\">#18102</a>)</li>\n<li><a href=\"https://github.com/facebook/react/commit/2c4221ce8bc5765bfddc4b32af4af602077a4a3e\"><code>2c4221c</code></a> Change string refs in function component message (<a href=\"https://github.com/facebook/react/tree/HEAD/packages/react-dom/issues/18031\">#18031</a>)</li>\n<li><a href=\"https://github.com/facebook/react/commit/3f85d53ca6f2af8a711daae6322e6bdda862f660\"><code>3f85d53</code></a> Further pre-requisite changes to plugin event system (<a href=\"https://github.com/facebook/react/tree/HEAD/packages/react-dom/issues/18083\">#18083</a>)</li>\n<li><a href=\"https://github.com/facebook/react/commit/1000f6135efba4f8d8ebffedeb7b472f532a8475\"><code>1000f61</code></a> Add container to event listener signature (<a href=\"https://github.com/facebook/react/tree/HEAD/packages/react-dom/issues/18075\">#18075</a>)</li>\n<li><a href=\"https://github.com/facebook/react/commit/4912ba31e3dcc8d08f5b16ae38b38d74da85ea21\"><code>4912ba3</code></a> Add modern event system flag + rename legacy plugin module (<a href=\"https://github.com/facebook/react/tree/HEAD/packages/react-dom/issues/18073\">#18073</a>)</li>\n<li><a href=\"https://github.com/facebook/react/commit/1a6d8179b6dd427fdf7ee50d5ac45ae5a40979eb\"><code>1a6d817</code></a> [react-interactions] Ensure onBeforeBlur fires for hideInstance (<a href=\"https://github.com/facebook/react/tree/HEAD/packages/react-dom/issues/18064\">#18064</a>)</li>\n<li>Additional commits viewable in <a href=\"https://github.com/facebook/react/commits/v16.13.0/packages/react-dom\">compare view</a></li>\n</ul>\n</details>\n<br />\n\n\n[![Dependabot compatibility score](https://api.dependabot.com/badges/compatibility_score?dependency-name=react-dom&package-manager=npm_and_yarn&previous-version=16.8.4&new-version=16.13.0)](https://dependabot.com/compatibility-score/?dependency-name=react-dom&package-manager=npm_and_yarn&previous-version=16.8.4&new-version=16.13.0)\n\nDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.\n\n[//]: # (dependabot-automerge-start)\n[//]: # (dependabot-automerge-end)\n\n---\n\n<details>\n<summary>Dependabot commands and options</summary>\n<br />\n\nYou can trigger Dependabot actions by commenting on this PR:\n- `@dependabot rebase` will rebase this PR\n- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it\n- `@dependabot merge` will merge this PR after your CI passes on it\n- `@dependabot squash and merge` will squash and merge this PR after your CI passes on it\n- `@dependabot cancel merge` will cancel a previously requested merge and block automerging\n- `@dependabot reopen` will reopen this PR if it is closed\n- `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually\n- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)\n- `@dependabot use these labels` will set the current labels as the default for future PRs for this repo and language\n- `@dependabot use these reviewers` will set the current reviewers as the default for future PRs for this repo and language\n- `@dependabot use these assignees` will set the current assignees as the default for future PRs for this repo and language\n- `@dependabot use this milestone` will set the current milestone as the default for future PRs for this repo and language\n- `@dependabot badge me` will comment on this PR with code to add a \"Dependabot enabled\" badge to your readme\n\nAdditionally, you can set the following in your Dependabot [dashboard](https://app.dependabot.com):\n- Update frequency (including time of day and day of week)\n- Pull request limits (per update run and/or open at any time)\n- Automerge options (never/patch/minor, and dev/runtime dependencies)\n- Out-of-range updates (receive only lockfile updates, if desired)\n- Security updates (receive only security updates, if desired)\n\n\n\n</details>","created_at":"2020-03-01T04:26:30Z","updated_at":"2020-03-01T04:26:32Z","closed_at":null,"merged_at":null,"merge_commit_sha":"c510c74c92d1f5ceb582c43a607be48c10501aec","assignees":[],"requested_reviewers":[],"requested_teams":[],"labels":[{"id":1224325914,"node_id":"MDU6TGFiZWwxMjI0MzI1OTE0","url":"https://api.github.com/repos/src-d/lookout/labels/dependencies","name":"dependencies","color":"0025ff","default":false,"description":"Pull requests that update a dependency file"},{"id":1225416698,"node_id":"MDU6TGFiZWwxMjI1NDE2Njk4","url":"https://api.github.com/repos/src-d/lookout/labels/javascript","name":"javascript","color":"168700","default":false,"description":"Pull requests that update Javascript code"}],"milestone":null,"draft":false,"commits_url":"https://api.github.com/repos/src-d/lookout/pulls/734/commits","review_comments_url":"https://api.github.com/repos/src-d/lookout/pulls/734/comments","review_comment_url":"https://api.github.com/repos/src-d/lookout/pulls/comments{/number}","comments_url":"https://api.github.com/repos/src-d/lookout/issues/734/comments","statuses_url":"https://api.github.com/repos/src-d/lookout/statuses/73716388a5281ab909772a178ebdd20b77715a15","head":{"label":"src-d:dependabot/npm_and_yarn/frontend/react-dom-16.13.0","ref":"dependabot/npm_and_yarn/frontend/react-dom-16.13.0","sha":"73716388a5281ab909772a178ebdd20b77715a15","user":{"login":"src-d","id":15128793,"node_id":"MDEyOk9yZ2FuaXphdGlvbjE1MTI4Nzkz","avatar_url":"https://avatars.githubusercontent.com/u/15128793?v=4","gravatar_id":"","url":"https://api.github.com/users/src-d","html_url":"https://github.com/src-d","followers_url":"https://api.github.com/users/src-d/followers","following_url":"https://api.github.com/users/src-d/following{/other_user}","gists_url":"https://api.github.com/users/src-d/gists{/gist_id}","starred_url":"https://api.github.com/users/src-d/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/src-d/subscriptions","organizations_url":"https://api.github.com/users/src-d/orgs","repos_url":"https://api.github.com/users/src-d/repos","events_url":"https://api.github.com/users/src-d/events{/privacy}","received_events_url":"https://api.github.com/users/src-d/received_events","type":"Organization","user_view_type":"public","site_admin":false},"repo":{"id":136146572,"node_id":"MDEwOlJlcG9zaXRvcnkxMzYxNDY1NzI=","name":"lookout","full_name":"src-d/lookout","private":false,"owner":{"login":"src-d","id":15128793,"node_id":"MDEyOk9yZ2FuaXphdGlvbjE1MTI4Nzkz","avatar_url":"https://avatars.githubusercontent.com/u/15128793?v=4","gravatar_id":"","url":"https://api.github.com/users/src-d","html_url":"https://github.com/src-d","followers_url":"https://api.github.com/users/src-d/followers","following_url":"https://api.github.com/users/src-d/following{/other_user}","gists_url":"https://api.github.com/users/src-d/gists{/gist_id}","starred_url":"https://api.github.com/users/src-d/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/src-d/subscriptions","organizations_url":"https://api.github.com/users/src-d/orgs","repos_url":"https://api.github.com/users/src-d/repos","events_url":"https://api.github.com/users/src-d/events{/privacy}","received_events_url":"https://api.github.com/users/src-d/received_events","type":"Organization","user_view_type":"public","site_admin":false},"html_url":"https://github.com/src-d/lookout","description":"Assisted code review, running custom code analyzers on pull requests","fork":false,"url":"https://api.github.com/repos/src-d/lookout","forks_url":"https://api.github.com/repos/src-d/lookout/forks","keys_url":"https://api.github.com/repos/src-d/lookout/keys{/key_id}","collaborators_url":"https://api.github.com/repos/src-d/lookout/collaborators{/collaborator}","teams_url":"https://api.github.com/repos/src-d/lookout/teams","hooks_url":"https://api.github.com/repos/src-d/lookout/hooks","issue_events_url":"https://api.github.com/repos/src-d/lookout/issues/events{/number}","events_url":"https://api.github.com/repos/src-d/lookout/events","assignees_url":"https://api.github.com/repos/src-d/lookout/assignees{/user}","branches_url":"https://api.github.com/repos/src-d/lookout/branches{/branch}","tags_url":"https://api.github.com/repos/src-d/lookout/tags","blobs_url":"https://api.github.com/repos/src-d/lookout/git/blobs{/sha}","git_tags_url":"https://api.github.com/repos/src-d/lookout/git/tags{/sha}","git_refs_url":"https://api.github.com/repos/src-d/lookout/git/refs{/sha}","trees_url":"https://api.github.com/repos/src-d/lookout/git/trees{/sha}","statuses_url":"https://api.github.com/repos/src-d/lookout/statuses/{sha}","languages_url":"https://api.github.com/repos/src-d/lookout/languages","stargazers_url":"https://api.github.com/repos/src-d/lookout/stargazers","contributors_url":"https://api.github.com/repos/src-d/lookout/contributors","subscribers_url":"https://api.github.com/repos/src-d/lookout/subscribers","subscription_url":"https://api.github.com/repos/src-d/lookout/subscription","commits_url":"https://api.github.com/repos/src-d/lookout/commits{/sha}","git_commits_url":"https://api.github.com/repos/src-d/lookout/git/commits{/sha}","comments_url":"https://api.github.com/repos/src-d/lookout/comments{/number}","issue_comment_url":"https://api.github.com/repos/src-d/lookout/issues/comments{/number}","contents_url":"https://api.github.com/repos/src-d/lookout/contents/{+path}","compare_url":"https://api.github.com/repos/src-d/lookout/compare/{base}...{head}","merges_url":"https://api.github.com/repos/src-d/lookout/merges","archive_url":"https://api.github.com/repos/src-d/lookout/{archive_format}{/ref}","downloads_url":"https://api.github.com/repos/src-d/lookout/downloads","issues_url":"https://api.github.com/repos/src-d/lookout/issues{/number}","pulls_url":"https://api.github.com/repos/src-d/lookout/pulls{/number}","milestones_url":"https://api.github.com/repos/src-d/lookout/milestones{/number}","notifications_url":"https://api.github.com/repos/src-d/lookout/notifications{?since,all,participating}","labels_url":"https://api.github.com/repos/src-d/lookout/labels{/name}","releases_url":"https://api.github.com/repos/src-d/lookout/releases{/id}","deployments_url":"https://api.github.com/repos/src-d/lookout/deployments","created_at":"2018-06-05T08:37:23Z","updated_at":"2025-10-05T17:39:33Z","pushed_at":"2021-08-03T19:18:36Z","git_url":"git://github.com/src-d/lookout.git","ssh_url":"git@github.com:src-d/lookout.git","clone_url":"https://github.com/src-d/lookout.git","svn_url":"https://github.com/src-d/lookout","homepage":"https://docs.sourced.tech/lookout","size":60130,"stargazers_count":152,"watchers_count":152,"language":"Go","has_issues":true,"has_projects":false,"has_downloads":true,"has_wiki":false,"has_pages":false,"has_discussions":false,"forks_count":33,"mirror_url":null,"archived":false,"disabled":false,"open_issues_count":84,"license":{"key":"agpl-3.0","name":"GNU Affero General Public License v3.0","spdx_id":"AGPL-3.0","url":"https://api.github.com/licenses/agpl-3.0","node_id":"MDc6TGljZW5zZTE="},"allow_forking":true,"is_template":false,"web_commit_signoff_required":false,"has_pull_requests":true,"pull_request_creation_policy":"all","topics":["code-review","github","lookout"],"visibility":"public","forks":33,"open_issues":84,"watchers":152,"default_branch":"master"}},"base":{"label":"src-d:master","ref":"master","sha":"d5cccd9aed531327965c374533f42e0469af4cda","user":{"login":"src-d","id":15128793,"node_id":"MDEyOk9yZ2FuaXphdGlvbjE1MTI4Nzkz","avatar_url":"https://avatars.githubusercontent.com/u/15128793?v=4","gravatar_id":"","url":"https://api.github.com/users/src-d","html_url":"https://github.com/src-d","followers_url":"https://api.github.com/users/src-d/followers","following_url":"https://api.github.com/users/src-d/following{/other_user}","gists_url":"https://api.github.com/users/src-d/gists{/gist_id}","starred_url":"https://api.github.com/users/src-d/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/src-d/subscriptions","organizations_url":"https://api.github.com/users/src-d/orgs","repos_url":"https://api.github.com/users/src-d/repos","events_url":"https://api.github.com/users/src-d/events{/privacy}","received_events_url":"https://api.github.com/users/src-d/received_events","type":"Organization","user_view_type":"public","site_admin":false},"repo":{"id":136146572,"node_id":"MDEwOlJlcG9zaXRvcnkxMzYxNDY1NzI=","name":"lookout","full_name":"src-d/lookout","private":false,"owner":{"login":"src-d","id":15128793,"node_id":"MDEyOk9yZ2FuaXphdGlvbjE1MTI4Nzkz","avatar_url":"https://avatars.githubusercontent.com/u/15128793?v=4","gravatar_id":"","url":"https://api.github.com/users/src-d","html_url":"https://github.com/src-d","followers_url":"https://api.github.com/users/src-d/followers","following_url":"https://api.github.com/users/src-d/following{/other_user}","gists_url":"https://api.github.com/users/src-d/gists{/gist_id}","starred_url":"https://api.github.com/users/src-d/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/src-d/subscriptions","organizations_url":"https://api.github.com/users/src-d/orgs","repos_url":"https://api.github.com/users/src-d/repos","events_url":"https://api.github.com/users/src-d/events{/privacy}","received_events_url":"https://api.github.com/users/src-d/received_events","type":"Organization","user_view_type":"public","site_admin":false},"html_url":"https://github.com/src-d/lookout","description":"Assisted code review, running custom code analyzers on pull requests","fork":false,"url":"https://api.github.com/repos/src-d/lookout","forks_url":"https://api.github.com/repos/src-d/lookout/forks","keys_url":"https://api.github.com/repos/src-d/lookout/keys{/key_id}","collaborators_url":"https://api.github.com/repos/src-d/lookout/collaborators{/collaborator}","teams_url":"https://api.github.com/repos/src-d/lookout/teams","hooks_url":"https://api.github.com/repos/src-d/lookout/hooks","issue_events_url":"https://api.github.com/repos/src-d/lookout/issues/events{/number}","events_url":"https://api.github.com/repos/src-d/lookout/events","assignees_url":"https://api.github.com/repos/src-d/lookout/assignees{/user}","branches_url":"https://api.github.com/repos/src-d/lookout/branches{/branch}","tags_url":"https://api.github.com/repos/src-d/lookout/tags","blobs_url":"https://api.github.com/repos/src-d/lookout/git/blobs{/sha}","git_tags_url":"https://api.github.com/repos/src-d/lookout/git/tags{/sha}","git_refs_url":"https://api.github.com/repos/src-d/lookout/git/refs{/sha}","trees_url":"https://api.github.com/repos/src-d/lookout/git/trees{/sha}","statuses_url":"https://api.github.com/repos/src-d/lookout/statuses/{sha}","languages_url":"https://api.github.com/repos/src-d/lookout/languages","stargazers_url":"https://api.github.com/repos/src-d/lookout/stargazers","contributors_url":"https://api.github.com/repos/src-d/lookout/contributors","subscribers_url":"https://api.github.com/repos/src-d/lookout/subscribers","subscription_url":"https://api.github.com/repos/src-d/lookout/subscription","commits_url":"https://api.github.com/repos/src-d/lookout/commits{/sha}","git_commits_url":"https://api.github.com/repos/src-d/lookout/git/commits{/sha}","comments_url":"https://api.github.com/repos/src-d/lookout/comments{/number}","issue_comment_url":"https://api.github.com/repos/src-d/lookout/issues/comments{/number}","contents_url":"https://api.github.com/repos/src-d/lookout/contents/{+path}","compare_url":"https://api.github.com/repos/src-d/lookout/compare/{base}...{head}","merges_url":"https://api.github.com/repos/src-d/lookout/merges","archive_url":"https://api.github.com/repos/src-d/lookout/{archive_format}{/ref}","downloads_url":"https://api.github.com/repos/src-d/lookout/downloads","issues_url":"https://api.github.com/repos/src-d/lookout/issues{/number}","pulls_url":"https://api.github.com/repos/src-d/lookout/pulls{/number}","milestones_url":"https://api.github.com/repos/src-d/lookout/milestones{/number}","notifications_url":"https://api.github.com/repos/src-d/lookout/notifications{?since,all,participating}","labels_url":"https://api.github.com/repos/src-d/lookout/labels{/name}","releases_url":"https://api.github.com/repos/src-d/lookout/releases{/id}","deployments_url":"https://api.github.com/repos/src-d/lookout/deployments","created_at":"2018-06-05T08:37:23Z","updated_at":"2025-10-05T17:39:33Z","pushed_at":"2021-08-03T19:18:36Z","git_url":"git://github.com/src-d/lookout.git","ssh_url":"git@github.com:src-d/lookout.git","clone_url":"https://github.com/src-d/lookout.git","svn_url":"https://github.com/src-d/lookout","homepage":"https://docs.sourced.tech/lookout","size":60130,"stargazers_count":152,"watchers_count":152,"language":"Go","has_issues":true,"has_projects":false,"has_downloads":true,"has_wiki":false,"has_pages":false,"has_discussions":false,"forks_count":33,"mirror_url":null,"archived":false,"disabled":false,"open_issues_count":84,"license":{"key":"agpl-3.0","name":"GNU Affero General Public License v3.0","spdx_id":"AGPL-3.0","url":"https://api.github.com/licenses/agpl-3.0","node_id":"MDc6TGljZW5zZTE="},"allow_forking":true,"is_template":false,"web_commit_signoff_required":false,"has_pull_requests":true,"pull_request_creation_policy":"all","topics":["code-review","github","lookout"],"visibility":"public","forks":33,"open_issues":84,"watchers":152,"default_branch":"master"}},"_links":{"self":{"href":"https://api.github.com/repos/src-d/lookout/pulls/734"},"html":{"href":"https://github.com/src-d/lookout/pull/734"},"issue":{"href":"https://api.github.com/repos/src-d/lookout/issues/734"},"comments":{"href":"https://api.github.com/repos/src-d/lookout/issues/734/comments"},"review_comments":{"href":"https://api.github.com/repos/src-d/lookout/pulls/734/comments"},"review_comment":{"href":"https://api.github.com/repos/src-d/lookout/pulls/comments{/number}"},"commits":{"href":"https://api.github.com/repos/src-d/lookout/pulls/734/commits"},"statuses":{"href":"https://api.github.com/repos/src-d/lookout/statuses/73716388a5281ab909772a178ebdd20b77715a15"}},"author_association":"NONE","auto_merge":null,"assignee":null,"active_lock_reason":null}]